thanks joe, my pap's modules section is already as follows: pap { encryption_scheme = clear } I'm trying to forward username and password to my own app, using post-auth section, to perform user authentication, as described below ... is that possible? Erico. ----- Mensagem original ---- De: joe vieira <jvieira@clarku.edu> Para: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Enviadas: Quarta-feira, 21 de Março de 2007 17:17:18 Assunto: Re: EAP-TTLS + Post-auth clear password Erico Augusto wrote:
Hi,
I would like to send clear-text password at post-auth using eap-ttls. is there a way? I'm avoiding to write a lot of details about the question. Just using post-auth I got to send User-password attribute, but it's cyphered at destination(Yes, there is all the TLS tunneling stuff, but I'm trying to see the problem at a simpler-unknown perspective). I'm using SecureW2 as supplicant(PAP), freeradius-1.1.2+jradius patch. i think by default pap is an md5 hash, you should be able to change that tho in the radiusd.conf (altho i could be totally insane.) in 1.1.4+ this looks to have changed to be auto negotiated. other people will know better than me but, i think this is accurate.
Joe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __________________________________________________ Fale com seus amigos de graça com o novo Yahoo! Messenger http://br.messenger.yahoo.com/
Erico Augusto wrote:
I'm trying to forward username and password to my own app, using post-auth section, to perform user authentication, as described below ... is that possible?
Yes. See the "exec" module. Why do you think the pap module has anything to do with it? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Erico Augusto