special characters in passwords + FR + ldap

Natalia Escalera nescalera at gmail.com
Wed Mar 29 01:16:17 CEST 2006


Hello,

We tried FR 1.1.1 and we are still having problems with passwords containing
special characters like '$' for the LDAP authentication. In FR 1.1.0 the '$'
was replaced by a character such as '%24'. For the new version, the symbol
'$' is deleted as well as the character that is next to it. Here is an
example of the executed command and its output:

Command:
/usr/local/bin/radtest username "test$2006" x.x.x.x 1 test123
Output:
Sending Access-Request of id 215 to x.x.x.x port 1812
User-Name = "username"
User-Password = "test006"        #<----- No dollar sign, no number 2
NAS-IP-Address = 255.255.255.255
NAS-Port = 1
rad_recv: Access-Reject packet from host  x.x.x.x:1812, id=215, length=20

Can this situation be considered please?

Thank you in advance,
Natalia.

On 3/27/06, Natalia Escalera <nescalera at gmail.com> wrote:
> Hi,
>
> We will try the new version and see if the problem was fixed.
>
> Thanks a lot.
> Natalia.
>
> On 3/27/06, Turtiainen, Tero <tero.turtiainen at capgemini.com> wrote:
> >
> > Hi,
> >
> > > From: "Natalia Escalera" <nescalera at gmail.com>
> > >
> > > I was wondering if someone has any idea of how to solve the problem of
> > > special characters(e.g. $) in FreeRadius 1.1.0.
> >
> > Have you tried FreeRADIUS 1.1. which was released last week?
> >
> > According to the ChangeLog the bug #261 has been fixed and it was the
> > "attributes retreived from ldap are truncated at first space" bug, which
> > sounded very similar to our problem:
> > http://bugs.freeradius.org/show_bug.cgi?id=261
> > --
> > Tero Turtiainen
> > Technology Services
> > Capgemini
> > tero.turtiainen at capgemini.com
> >
> > This message contains information that may be privileged or confidential
and is the property of the Capgemini Group. It is intended only for the
person to whom it is addressed. If you are not the intended recipient,  you
are not authorized to read, print, retain, copy, disseminate,  distribute,
or use this message or any part thereof. If you receive this  message in
error, please notify the sender immediately and delete all  copies of this
message.
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060328/5713aa4f/attachment.html>


More information about the Freeradius-Users mailing list