User-Password formats

niall el-assaad niallel at gmail.com
Tue May 13 22:02:19 CEST 2008


Hi,
I have a setup with freeradius where it is launching an external script to
authenticate users.

When doing PAP authentication against the radius server I receive the
%{User-Password} and pass it to my script.

However when using a cisco wireless lan controller it seems not to pass
User-Password as the text, it encodes it in another format.

I'm wondering if anyone knows what format this is.

>From a radiusd -X I get the following when it works

rad_recv: Access-Request packet from host 10.10.76.3:32769, id=12,
length=119

        User-Name = "cisco at cisco.com"

        User-Password = "password"

        Service-Type = Login-User

        NAS-IP-Address = 10.10.76.2

        NAS-Identifier = "Franciscan-2"

        Airespace-Wlan-Id = 1

        Calling-Station-Id = "10.10.76.135"

        Called-Station-Id = "10.10.76.3"

So it passes my script the password in plain text

and when I use the Cisco WLC it fails and I get

rad_recv: Access-Request packet from host 10.10.76.2:32769, id=12,
length=119

        User-Name = "cisco at cisco.com"

        User-Password = "]\313\347C\223\240\350\351\275!\307L\300\210"

        Service-Type = Login-User

        NAS-IP-Address = 10.10.76.2

        NAS-Identifier = "Franciscan-2"

        Airespace-Wlan-Id = 1

        Calling-Station-Id = "10.10.76.135"

        Called-Station-Id = "10.10.76.2"


My script obviously gets passed
"]\313\347C\223\240\350\351\275!\307L\300\210"

Does anyone know what format this is? Or how I can convert it to get the
password in plain text format?

thanks,

niall
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080513/5090da1c/attachment.html>


More information about the Freeradius-Users mailing list