Cisco enable authentication on freeradius and mysql

[Peter Nixon]

If you look in sql.conf you should see:

# Safe characters list for sql queries. Everything else is replaced
# with their mime-encoded equivalents.
# The default list should be ok
safe-characters 
= "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"


You can add $ to that list...

Peter



On Fri 16 Feb 2007 17:53, mkr1e at yahoo.com wrote:
> I am trying to authenticate Cisco enable password requests via freeradius
> (1.1.3.) on a mysql (5.0.26) database.
>
> As per http://wiki.freeradius.org/Cisco, the router tries to authenticate
> user $enab15$ but it doesn't get matched on mysql query because '$' gets
> escaped to '=24'
>
> radius_xlat:  '$enab15$'
> rlm_sql (sql): sql_set_user escaped user --> '$enab15$'
> radius_xlat:  'SELECT id, UserName, Attribute, Value, op           FROM
> radcheck           WHERE Username = '=24enab15=24'           ORDER BY id'
> rlm_sql (sql): Reserving sql socket id: 1
> rlm_sql (sql): User $enab15$ not found in radcheck
>
>
> Is there any solution to this?
>
>
>
> __________________________________________________________________________
>__________ Have a burning question?
> Go to www.Answers.yahoo.com and get answers from real people who know.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

-- 

Peter Nixon
http://www.peternixon.net/
PGP Key: http://www.peternixon.net/public.asc