password encryption problem

[Hegedus Gabor]

Nicolas Goutte wrote:
>
> Am 31.07.2009 um 15:13 schrieb Hegedus Gabor:
>
>> Hi all!
>>
>> I have a problem, I want to authenticate console users in cisco 
>> switches.
>> In the 2960, the switch send the password in cleartext, nothing problem.
>>
>> User-Password="password"
>
> Please try using
>
> Cleartext-Password := "password"
>
> in the users file (or similarly in databases).
>
>
as I said I tried clear text password in the ldap, and nothing changed. 
My user is in the ldap and not in the users file.

>>
>> but int the 2950, the switch can only send in "crypted" version like 
>> this:
>>
>> NAS-Port-Type = Virtual
>> User-Name = "test"
>> Calling-Station-Id = "192.168.***"
>> User-Password = "\\342\455\325]̍\322\tM~\237\616}\266\426"
>> Service-Type = Login-User
>>
>> In the ldap database I tried all of the encription type (clear, md5, 
>> crypt, md5crypt) but every time reject the authentication:
>>
>> frad debug:
>>
>> Failed to authenticate the user.
>> Login incorrect (rlm_ldap: Bind as user failed): 
>> [test/\\_\266\065]�?\663\tM~\667\354}\126\316] (from client switch 
>> port 1 cli 192.168.***
>> WARNING: Unprintable characters in the password. Double-check the 
>> shared secret on the server and the NAS!
>>
>>
>> What can I do in the freeradius, what I forgot?
>> Thanks! Gabor
>> -
>> List info/subscribe/unsubscribe? See 
>> http://www.freeradius.org/list/users.html
>
>
> Have a nice day!
>
> Nicolas Goutte
>
>
> extragroup GmbH - Karlsruhe
> Waldstr. 49
> 76133 Karlsruhe
> Germany
>
> Geschäftsführer: Stephan Mönninghoff, Hans Martin Kern, Tilman Haerdle
> Registergericht: Amtsgericht Münster / HRB: 5624
> Steuer Nr.: 337/5903/0421 / UstID: DE 204607841
>
>
>
>
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html