STORE PWD using MD5 and EAP-PEAP-MSCHAPv2 for the comunication-----------------------------------
Does Anybody know HOW I can make radius WORK with md5-stored password in the db? I use EAP-PEAP-MSCHAPv2, and if the system works great if the pwds are in clear in the mysqlDB best regards. Nicola
ego seek wrote:
Does Anybody know HOW I can make radius WORK with md5-stored password in the db?
I use EAP-PEAP-MSCHAPv2, and if the system works great if the pwds are in clear in the mysqlDB
You can't. See http://deployingradius.com/documents/protocols/compatibility.html Store an 'NT-Password' value as a config ':=' attribute in the radcheck table. NT password hashes can be generated in most programming languages. Rob -- Rob Shepherd | Computer and Network Engineer | Technium CAST | LL57 4HJ rob@techniumcast.com | 01248 675024 | 077988 72480
"ego seek" <egoseek@gmail.com> wrote:
Does Anybody know HOW I can make radius WORK with md5-stored password in the db?
I use EAP-PEAP-MSCHAPv2, and if the system works great if the pwds are in clear in the mysqlDB
http://deployingradius.com/documents/protocols/compatibility.html What you want to do is impossible. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
ego seek wrote:
Does Anybody know HOW I can make radius WORK with md5-stored password in the db?
I use EAP-PEAP-MSCHAPv2, and if the system works great if the pwds are in clear in the mysqlDB
You can't authenticate EAP-PEAP/EAP-MSCHAP-v2 against MD5 passwords - it's impossible. You must store passwords in either plain-text or NT-hash formats. josh. (Can someone please make this a FAQ entry, I've lost count of the number of times it's come up...)
best regards.
Nicola
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
ego seek -
Josh Howlett -
Rob Shepherd