access challenge on empty password
Hi, I use pam_radius with openssh on a FreeBSD box. When I authenticate, and for the first time I simply enter an empty password then the second time I am prompted for the password characters are echoed on the terminal. As I can see my freeradius server responses an access challenge to request with an existing user and empty password combo. Is this a normal behaviour? How can I configure the system not to do so? Thanks! -- View this message in context: http://freeradius.1045715.n5.nabble.com/access-challenge-on-empty-password-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.
izotov wrote:
Hi, I use pam_radius with openssh on a FreeBSD box. When I authenticate, and for the first time I simply enter an empty password then the second time I am prompted for the password characters are echoed on the terminal. As I can see my freeradius server responses an access challenge to request with an existing user and empty password combo. Is this a normal behaviour? How can I configure the system not to do so?
Why have you configured the server to respond with an Access-Challenge? Alan DeKok.
I did not configure so (it must be a default). Where is that configuration entry? -- View this message in context: http://freeradius.1045715.n5.nabble.com/access-challenge-on-empty-password-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Alan DeKok-2 wrote:
Have you tried running the server in debugging mode as suggested in the FAQ, README, INSTALL, "man" page, and daily on this list?
Yes, I always do so. But this time it did not help me to find the answer. -- View this message in context: http://freeradius.1045715.n5.nabble.com/access-challenge-on-empty-password-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On Fri, Apr 1, 2011 at 3:43 PM, izotov <karoly.arnhoffer@gmail.com> wrote:
Alan DeKok-2 wrote:
Have you tried running the server in debugging mode as suggested in the FAQ, README, INSTALL, "man" page, and daily on this list?
Yes, I always do so. But this time it did not help me to find the answer.
I think what Alan means, if you have a problem, post the output of debug mode (radiusd -X) so others can help you troubleshoot the issue by reading and interpreting what's in the output. Simply saying "I always do so" but not providing the log is like saying "I have a problem, I don't know how to solve it, and I don't want to give any details about it either. Can you help me?" -- Fajar
http://freeradius.1045715.n5.nabble.com/file/n4275090/radius.log radius.log Fajar A. Nugraha-2 wrote:
if you have a problem, post the output of debug mode (radiusd -X)
I am sorry. I try to get the rhythm. Log is attached. -- View this message in context: http://freeradius.1045715.n5.nabble.com/access-challenge-on-empty-password-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.
participants (3)
-
Alan DeKok -
Fajar A. Nugraha -
izotov