MySQL Collation and Multiple Login Possibility Help
Hi all, This is a chilli+FR implementation and running well. Today by accident, I found out that multiple login is possible for the same account. Although Attribute (User-Password) is treated case-sensitive, 'username' is not during authentication. To further clarify: ============= Original Account created username = ABCDE User-Password := 123456 Simultaneous-Use := 1 but found out that ============== ABCDE 123456 Abcde 123456 ABcde 123456 ABCde 123456 ABCDe 123456 aBcde 123456 etc. are all valid login. OS: CentOS 5.5 DB: MySQL 5.5 FR: 2.1.17 (pacakged with CentOS) It seems like it has more to do with MySQL query. Quick googling revealed that query needs explicit COLLATE command to make the search case-sensitive for non-binary text. http://dev.mysql.com/doc/refman/5.0/en/case-sensitivity.html But I don't know where in FR i can modify this query. Can somebody show me the right direction? I am not sure if this has been fixed for newer FR versions. Thanks Deepak
Deepak wrote:
Today by accident, I found out that multiple login is possible for the same account. Although Attribute (User-Password) is treated case-sensitive, 'username' is not during authentication. ... It seems like it has more to do with MySQL query. Quick googling revealed that query needs explicit COLLATE command to make the search case-sensitive for non-binary text.
http://dev.mysql.com/doc/refman/5.0/en/case-sensitivity.html
But I don't know where in FR i can modify this query.
raddb/sql/mysql/dialup.conf
Can somebody show me the right direction?
I am not sure if this has been fixed for newer FR versions.
Nope. In 2.1.10, uou can also put this in raddb/sites-enabled/default, at the top of the "authorize" section: authorize { # force the user name to be all lower-case. if (User-Name != "%{tolower:%{User-Name}}") { reject } ... } Alan DeKok.
participants (2)
-
Alan DeKok -
Deepak