Is it possible to make PAP module understand both CRYPT (MD5) and plaintext passwords?

Dennis Skinner dskinner at bluefrog.com
Tue Feb 28 00:19:46 CET 2006


Alex Savguira wrote:
> Having
>  pap pap{
>                 encryption_scheme = crypt
>         }
>  pap papplain{
>                 encryption_scheme = clear
>         }
> 

If I understand you, then you are redoing what the server already does.
 FreeRADIUS knows which scheme to use based on the attribute in the
users file or SQL:

username Password := blah
or
username Crypt-Password := $1$blah

If it sees, the first, it knows that "blah" is the clear password it
needs to check against.  If it sees the second, it knows that it is crypted.

-- 
Dennis Skinner
Systems Administrator
BlueFrog Internet
http://www.bluefrog.com



More information about the Freeradius-Users mailing list