Issues with rlm_pap

Deramus, Chris Chris.Deramus at hq.doe.gov
Tue Mar 20 12:38:28 CET 2007


Alan,

Thanks so much for the response, I wasn't aware that the (md5) header
needed to be in the database. The requested information is below:

UserName		Attribute		Value
op
test.user		Password
c1dd8z473d9gf5c13b0d89b32d15333	:=

-----Original Message-----
From:
freeradius-users-bounces+chris.deramus=hq.doe.gov at lists.freeradius.org
[mailto:freeradius-users-bounces+chris.deramus=hq.doe.gov at lists.freeradi
us.org] On Behalf Of Alan DeKok
Sent: Tuesday, March 20, 2007 5:43 AM
To: FreeRadius users mailing list
Subject: Re: Issues with rlm_pap

Deramus, Chris wrote:
> This no longer seems to work, as FreeRADIUS seems to be attempting to 
> compare the clear-text password with the MD5 password returned from 
> the database. I'm guessing it's an oversight on my end, and wanted to 
> see if anyone on this list noticed anything. I have included portions 
> of my radiusd.conf and users files which are pertinent to this issue.

  Can you post what's in your SQL database?  i.e. attribute name,
operator, and value.

  I suspect that the contents of the User-Password are the MD5 hash,
rather than the {md5} header followed by the MD5 hash.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html






More information about the Freeradius-Users mailing list