Hello today we use FreeRADIUS Version 3.0.16 on "Ubuntu 18.04 LTS" recently, for security reasons, we change the hash of passwd in our ldap directory from {SSHA} to {CRYPT}*SCRYPT *but EAP/TTLS/PAP no longer works Indeed, man rlm_pap talks about crypt but not *scrypt* I installed a new test VM host with FreeRADIUS Version 3.2.5 on "Ubuntu 24.04.2 LTS" It works fine now but I don't know if it's due to the new version of freeradius or the updated crypt libraries for exemple ? Even in this version, man rlm_pap talks about crypt but not *scrypt* In /usr/share/doc/libcrypt-dev/README.md.gz for exemple I find effectively that SCRYPT is supported Can you help me answer this question? Thank you, Bregards Marc -- IMT Atlantique <https://www.imt-atlantique.fr> *Marc FRADIN* Ingénieur Système et Réseaux 02 99 12 70 24 - 06 30 51 38 40 2, rue de la Châtaigneraie CS 17608 35576 Cesson Sévigné Cedex Site web IMT Atlantique <https://www.imt-atlantique.fr>Twitter IMT Atlantique <https://twitter.com/IMTAtlantique>Facebook IMT Atlantique <https://www.facebook.com/IMTAtlantique>LinkedIn IMT Atlantique <https://www.linkedin.com/school/24772587/>Instagram IMT Atlantique <https://www.instagram.com/imt_atlantique/>Blog IMT Atlantique <http://www.imt-atlantique.fr/l-ecole/actualites> Une école de l'IMT <https://www.imt.fr>
On Jul 16, 2025, at 10:44 AM, Marc Fradin <marc.fradin@imt-atlantique.fr> wrote:
recently, for security reasons, we change the hash of passwd in our ldap directory from {SSHA} to {CRYPT}*SCRYPT *but EAP/TTLS/PAP no longer works
Indeed, man rlm_pap talks about crypt but not *scrypt*
It uses "crypt" as a short form for any crypt-style storage. In order to do its work, the module uses the crypt() function which supplied by the local OS.
I installed a new test VM host with FreeRADIUS Version 3.2.5 on "Ubuntu 24.04.2 LTS" It works fine now but I don't know if it's due to the new version of freeradius or the updated crypt libraries for exemple ?
Updating the local OS allows it to support more variants of crypt encoding. Alan DeKok.
participants (2)
-
Alan DeKok -
Marc Fradin