2011/8/2 gary <gary.yang@browan.com>

Hi All I configure the NAS client as pap method for user authentication. But through the packet analysis by wireshark it appears "Encrypted".

To debug radius problems, it's much easier and informative to run debug mode (radiusd -X) instead of using packet sniffers.

Is it normal or any incorrect configure on NAS or Freeradius server?

Yup, that's normal. From http://www.ietf.org/rfc/rfc2865.txt : Network Security Transactions between the client and RADIUS server are authenticated through the use of a shared secret, which is never sent over the network. In addition, any user passwords are sent encrypted between the client and RADIUS server, to eliminate the possibility that someone snooping on an unsecure network could determine a user's password. If the shared server is correct, the radius server will be able to see the password as clear-text (i.e. unencrypted, exactly the way user enters it). This is different from (for example) mschapv2, where the radius server can't see what the clear-text password is by simply looking at what the client sent. -- Fajar

Hi All Thanks very much for your reply. Best Regards Gary ----- Original Message ----- From: Arran Cudbard-Bell To: FreeRadius users mailing list Sent: Tuesday, August 02, 2011 2:54 PM Subject: Re: [freeradius+mysql]pap method Um yes, it's 'encrypted' using the shared secret between the NAS and the RADIUS server... this is described in RFC 2865. On 2 Aug 2011, at 07:31, gary wrote: Hi All I configure the NAS client as pap method for user authentication. But through the packet analysis by wireshark it appears "Encrypted". Is it normal or any incorrect configure on NAS or Freeradius server? <111.JPG> Best Regards Gary - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter ------------------------------------------------------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi Arran, Fajar I've try and thank you so much. Best Regards Gary ----- Original Message ----- From: "Fajar A. Nugraha" <list@fajar.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, August 01, 2011 4:41 PM Subject: Re: [freeradius+mysql]new field of table

2011/8/1 gary <gary.yang@browan.com>:

...

Hi to all Anybody give me some guideline? I would like to add new field in mysql table, how to configure freeradius recognize the field and fill out the correct value that I want?

All queries are customizable. By default it's on raddb/sql/mysql/dialup.conf

-- Fajar

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html