A question about rlm modules
Ali Majdzadeh
ali.majdzadeh at gmail.com
Thu Oct 25 11:49:23 CEST 2007
Hello Alan
Yes, I am sure that the code works correctly, because the CHAP module
accepts the clear text password which I have provided in the
request->config_items. Below is my code for the authorize section of the
module:
static int netbill_authorize (void *instance, REQUEST *request)
{
VALUE_PAIR *password;
VALUE_PAIR *clear_text_password;
instance = instance;
request = request;
clear_text_password = pairmake ("User-Password", "123456", T_OP_EQ);
pairadd (&request->config_items, clear_text_password);
return RLM_MODULE_OK;
}
And this is the server's log:
Thu Oct 25 13:18:42 2007 : Debug: modcall: entering group CHAP for request 1
Thu Oct 25 13:18:42 2007 : Debug: modsingle[authenticate]: calling chap
(rlm_chap) for request 1
Thu Oct 25 13:18:42 2007 : Debug: rlm_chap: login attempt by "ali" with
CHAP password
Thu Oct 25 13:18:42 2007 : Debug: rlm_chap: Using clear text password
"123456" for user ali authentication.
Thu Oct 25 13:18:42 2007 : Debug: rlm_chap: Password check failed
Thu Oct 25 13:18:42 2007 : Debug: modsingle[authenticate]: returned from
chap (rlm_chap) for request 1
Thu Oct 25 13:18:42 2007 : Debug: modcall[authenticate]: module "chap"
returns reject for request 1
Thu Oct 25 13:18:42 2007 : Debug: modcall: leaving group CHAP (returns
reject) for request 1
Thu Oct 25 13:18:42 2007 : Debug: auth: Failed to validate the user.
Thanks in advance.
2007/10/25, Alan DeKok <aland at deployingradius.com>:
>
> Ali Majdzadeh wrote:> I have written an rlm_module. It works fine. Here,
> we have clients which
> > should be authenticated using CHAP passwords. In the radiusd.conf, I
> > have mentioned my module before the CHAP module in the authentication
> > section. Also, I have found that my module should populate the
> > request->config_items field of the request with the clear text password
> > so that the CHAP module can process the request. I have added the
> > required code to do so, but the CHAP module complains about the size of
> > the password.
>
> Would it be possible to post the error message? Are you sure that
> your code correctly creates the clear-text password?
>
> Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071025/62ba87e9/attachment.html>
More information about the Freeradius-Users
mailing list