freeradius query on password encryption and decryption
HI, I am using seagull testing tool to send messages to free radius. I am running seagull with "radius protocol ". When i send messages from seagull to freeradius , the password is not getting decrypted properly on radius side. Can you please tell me how to send password from seagull without encryption ?? OR What changes to make on freeradius side to make it decrypt the password?? Thanks & Regards, Yashaswini | Prod Engg | Tech Mahindra Ltd. 9 / 7 Hosur Road, Bangalore - 560029, India. (Office: +91 80 40243000, Extn: 3478 Mobile: +91 9611591177 www.techmahindra.com <http://www.techmahindra.com/> ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================
Hi,
I am using seagull testing tool to send messages to free radius. I am running seagull with "radius protocol ". When i send messages from seagull to freeradius , the password is not getting decrypted properly on radius side. Can you please tell me how to send password from seagull without encryption ?? OR What changes to make on freeradius side to make it decrypt the password??
...and what does the RADIUS debug output show you (radiusd -X ) ? alan
Hi alan, Every time I am sending a message from seagull to freeradius ,it is decode the password differently. I am also getting the following error in Radius debug mode . rad_recv: Access-Request packet from host 172.22.55.232 port 65535, id=6, length=56 Acct-Session-Id = "6" User-Name = "uname" User-Password = "\311~B]\021\267\332i\217" NAS-IP-Address = 172.22.55.232 NAS-Port-Type = Virtual ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [username/password] (from client test1 port 0) WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! I have tried searching on Google but didn't find much to resolve this . please help . Thanks & Regards, Yashaswini | Prod Engg | Tech Mahindra Ltd. 9 / 7 Hosur Road, Bangalore - 560029, India. (Office: +91 80 40243000, Extn: 3478 Mobile: +91 9611591177 www.techmahindra.com -----Original Message----- From: freeradius-users-bounces+ys0072917=techmahindra.com@lists.freeradius.org [mailto:freeradius-users-bounces+ys0072917=techmahindra.com@lists.freeradius.org] On Behalf Of A.L.M.Buxey@lboro.ac.uk Sent: 20 December 2012 16:16 To: FreeRadius users mailing list Subject: Re: freeradius query on password encryption and decryption Hi,
I am using seagull testing tool to send messages to free radius. I am running seagull with "radius protocol ". When i send messages from seagull to freeradius , the password is not getting decrypted properly on radius side. Can you please tell me how to send password from seagull without encryption ?? OR What changes to make on freeradius side to make it decrypt the password??
...and what does the RADIUS debug output show you (radiusd -X ) ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================
Yashaswini Sathyanarayana wrote:
Every time I am sending a message from seagull to freeradius ,it is decode the password differently. I am also getting the following error in Radius debug mode . ... WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS!
Perhaps you could try READING that message, and FOLLOWING THE INSTRUCTIONS.
I have tried searching on Google but didn't find much to resolve this . please help .
Because it's better to read random web pages on the net, than to read the messages you're posting to this list. Right? What part of that message is unclear? Have you tried following the instructions? Or is it a complete mystery? Alan DeKok.
Hi , User-Password = "\311~B]\021\267\332i\217" This part of message is not right. The shared secret is same in both system. Thanks & Regards, Yashaswini | Prod Engg | Tech Mahindra Ltd. 9 / 7 Hosur Road, Bangalore - 560029, India. (Office: +91 80 40243000, Extn: 3478 Mobile: +91 9611591177 www.techmahindra.com ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================
Yashaswini Sathyanarayana wrote:
User-Password = "\311~B]\021\267\332i\217" This part of message is not right. The shared secret is same in both system.
Either (a) it's not the same, or (b) the client has a bug. And don't argue over this. I've been doing RADIUS for ~15 years. The two choices above are the ONLY POSSIBLE choices. Alan DeKok.
I am using seagull to send messages to freeradius . Is there any place I need to set shared secret in seagull also . I have installed seagull in the same machine as freeradius. Thanks & Regards, Yashaswini | Prod Engg | Tech Mahindra Ltd. 9 / 7 Hosur Road, Bangalore - 560029, India. (Office: +91 80 40243000, Extn: 3478 Mobile: +91 9611591177 www.techmahindra.com ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================
On 20/12/12 11:50, Yashaswini Sathyanarayana wrote:
WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS!
This message is accurate. You have a typo, or the NAS is buggy. Re-set the shared secret to something VERY SIMPLE e.g. abc123 - no punctuation or spaces. Then try again. Once you've determined the problem character(s), make a secure one.
I am using seagull to send messages to freeradius. seagull and freeradius are in same machine. I am not clear about how to set password in nas?? Please help. Thanks & Regards, Yashaswini | Prod Engg | Tech Mahindra Ltd. 9 / 7 Hosur Road, Bangalore - 560029, India. (Office: +91 80 40243000, Extn: 3478 Mobile: +91 9611591177 www.techmahindra.com ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================
participants (4)
-
A.L.M.Buxey@lboro.ac.uk -
Alan DeKok -
Phil Mayers -
Yashaswini Sathyanarayana