etc_passwd module doesnt authenticate

Alan DeKok aland at ox.org
Thu Jul 28 19:02:25 CEST 2005


Ramses van Pinxteren <ramses at niob.knaw.nl> wrote:
> >   You've configured the passwd module to set Auth-Type = MSCHAP.
> >Don't do that.
> 
> This is the config file I am using minus all the comments:

  That's nice.  It's also irrelevant.  I asked you to change *one*
thing, not to show your entire config.

> rad_recv: Access-Request packet from host 127.0.0.1:32774, id=224, length=62
>          User-Name = "ramses"
>          User-Password = "95903FD81E9ECFEC17306D272A9441BB"

  Is that really the password?  I doubt it very much.

> rlm_passwd: Added LM-Password: '95903FD81E9ECFEC17306D272A9441BB' to 
> config_items

  Ah, yes.  You're giving the client the hashed password, not the real
password.  That's wrong.

> auth: No authenticate method (Auth-Type) configuration found for the 
> request: Rejecting the user

  So set Auth-Type.  But don't set it to MS-CHAP.

  Alan DeKok.




More information about the Freeradius-Users mailing list