Freeradius and rlm_mysql with encrypted PWD's
Hi All, In Prev. Threads i read about the same Problem i have now. But i never found an answer which solves my problem. My question is: what kind of Password-encryption is supported in the mysql-DB used by the Freeradius-Server to authenticate Users. Cleartext-PWD's are working fine. Sql-Encryption for the PWD's works fine too. (I used the encrypt() command of mysql to create the encrypted Passwords for the radcheck-Table). Does MD5 or sha1 work too? I tried to get md5 working but get stucked... Can anyone send me a howto or link to one? I can send my configuration if u need. Thanks for your help
Rascher, Markus wrote:
In Prev. Threads i read about the same Problem i have now. But i never found an answer which solves my problem. My question is: what kind of Password-encryption is supported in the mysql-DB used by the Freeradius-Server to authenticate Users.
It depends... http://deployingradius.com/documents/protocols/compatibility.html -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
Hi, Thx for your answer. My situation is: I want to authenticate users who are logging into linux systems or cisco systems via ssh. The ssh-Client sends a radius request to the freeradius-server. The Radius-Server can read the user-Password from the request and decrypt it. I want to use a mysql-db to store the pwd's. How do I have to configure the freeradius-server so I can save the pwd's as MD5, or sha1 hash? -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+markus.mr.rascher=siemens.com@lists.freeradius.org [mailto:freeradius-users-bounces+markus.mr.rascher=siemens.com@lists.freeradius.org] Im Auftrag von Dennis Skinner Gesendet: Dienstag, 22. Mai 2007 17:31 An: FreeRadius users mailing list Betreff: Re: Freeradius and rlm_mysql with encrypted PWD's Rascher, Markus wrote:
In Prev. Threads i read about the same Problem i have now. But i never found an answer which solves my problem. My question is: what kind of Password-encryption is supported in the mysql-DB used by the Freeradius-Server to authenticate Users.
It depends... http://deployingradius.com/documents/protocols/compatibility.html -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Rascher, Markus wrote:
Thx for your answer. My situation is: I want to authenticate users who are logging into linux systems or cisco systems via ssh. The ssh-Client sends a radius request to the freeradius-server.
The Radius-Server can read the user-Password from the request and decrypt it. I want to use a mysql-db to store the pwd's. How do I have to configure the freeradius-server so I can save the pwd's as MD5, or sha1 hash?
$ man rlm_pap Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (3)
-
Alan Dekok -
Dennis Skinner -
Rascher, Markus