Re: Freeradius as a proxy to Windows IAS - reserved characters in shared secret?
Hi Thanks once again for all the advice :-) Does anyone know if there some characters that are reserved i.e cannot be used in secret keys with a freeradius server. If so what are they? I've been experimenting with the radtest client and the freeradius server using local unix validation with interesting results. 1) If I use a secret key (16+ characters and the same key in both the radtest client and freeradius clients.conf) that contains pure alpha characters the key is accepted and authorisation is successful. 2) If I use a secret key (similar to the one set on the IAS server) containing characters such as $\[ then the key is rejected and authorisation is unsuccessful. I have tried enclosing the key in single and double quotes, but the key is still rejected. Hopefully getting nearer to a solution... Thanks very much Clive
Hi clive, Wednesday, August 1, 2007, 11:10:41 AM, you wrote:
2) If I use a secret key (similar to the one set on the IAS server) containing characters such as $\[ then the key is rejected and
Character "Escape from Alcatraz", a classic movie with Clint Eastwood.. Be careful with character escaping and bash cli (always use single quotes to pass to radtest what you want). Also avoid ${foo} as a secret client 127.0.0.1 { secret = "\044{prefix}" } radtest gigi kent 127.0.0.1 1 '/radiusd' => OK!! ($prefix = /radiusd) client 127.0.0.1 { secret = "\\testing123" } radtest gigi kent 127.0.0.1 1 '\testing123' => OK radtest gigi kent 127.0.0.1 1 "\testing123" => OK (because bash does not expand \t) radtest gigi kent 127.0.0.1 1 "\\testing123" => OK (because bash expands \\t to \t) radtest gigi kent 127.0.0.1 1 '\\testing123' => NOT ok client 127.0.0.1 { secret = "$\[" } radtest gigi kent 127.0.0.1 1 '$[' => OK client 127.0.0.1 { secret = "$\\[" } radtest gigi kent 127.0.0.1 1 '$\[' => OK Have fun! Best regards, Claudiu Filip @: claudiu@globtel.ro Http://www.globtel.ro T:+40344880100 F:+40344880113
participants (2)
-
Claudiu Filip -
clive gould