Hi, currently in the process of migrating to 1.1.6 and the User-Password replacements. We used to have several entries, and for some of them I'm not really sure what to do with... if someone could add some clarity to that it would be highly appreciated! User-Password := something => Cleartext-Password := something Crypt-Password := unixcrypt => Crypt-Password := unixcrypt (these are easy) Crypt-Password := $1$somethingveryweird => SMD5-Password := somethingveryweird (stripping the header, and $1$ meands MD5 with 12-character salt, right?) Crypt-Password := $2a$somethingveryweirdandevenlonger => ????-Password := somethingveryweirdandevenlonger (no clue here... read that $2a$ is a Blowfish crypt, but there is no Blowfish-Password attribute, but apparently right now with 1.1.3 it works anyway?) Greetings, Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Stefan Winter wrote:
User-Password := something => Cleartext-Password := something Crypt-Password := unixcrypt => Crypt-Password := unixcrypt
Yes.
Crypt-Password := $1$somethingveryweird => SMD5-Password := somethingveryweird
(stripping the header, and $1$ meands MD5 with 12-character salt, right?)
If you want. I don't think it's necessary, though.
Crypt-Password := $2a$somethingveryweirdandevenlonger => ????-Password := somethingveryweirdandevenlonger
(no clue here... read that $2a$ is a Blowfish crypt, but there is no Blowfish-Password attribute, but apparently right now with 1.1.3 it works anyway?)
Because the "crypt" support on your system interprets it, and Does The Right Thing. If the crypt function on your system *didn't* support SMD5 passwords, you would have to make FreeRADIUS know about SMD5. As it is, I'll bet if you just leave all of the Crypt-Password entries alone, they should all work. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Stefan Winter