password encryption problem

Hegedus Gabor hegedus.gabor at euroway.hu
Fri Jul 31 15:13:16 CEST 2009


Hi all!

I have a problem, I want to authenticate console users in cisco switches.
In the 2960, the switch send the password in cleartext, nothing problem.

User-Password="password"

but int the 2950, the switch can only send in "crypted" version like this:

NAS-Port-Type = Virtual
User-Name = "test"
Calling-Station-Id = "192.168.***"
User-Password = "\\342\455\325]̍\322\tM~\237\616}\266\426"
Service-Type = Login-User

In the ldap database I tried all of the encription type (clear, md5, 
crypt, md5crypt) but every time reject the authentication:

frad debug:

Failed to authenticate the user.
Login incorrect (rlm_ldap: Bind as user failed): 
[test/\\_\266\065]�?\663\tM~\667\354}\126\316] (from client switch port 
1 cli 192.168.***
WARNING: Unprintable characters in the password. Double-check the shared 
secret on the server and the NAS!


What can I do in the freeradius, what I forgot?
Thanks! Gabor



More information about the Freeradius-Users mailing list