PAP Auto Header

Arran Cudbard-Bell a.cudbardb at freeradius.org
Mon Aug 22 12:16:18 CEST 2011


* added,

And no you shouldn't need to use auto-hearder if you've set the appropriate password attribute.

The recommended way is to prepend the headers, and use auto_header as its more flexible, and allows you to migrate between hash schemes non disruptively.

-Arran

On 22 Aug 2011, at 12:00, Arran Cudbard-Bell wrote:

> That would depend on whether you've add the correct header to the hash :)
> 
> /*
>  *	For auto-header discovery.
>  */
> static const FR_NAME_NUMBER header_names[] = {
> 	{ "{clear}",	PW_CLEARTEXT_PASSWORD },
> 	{ "{cleartext}", PW_CLEARTEXT_PASSWORD },
> 	{ "{md5}",	PW_MD5_PASSWORD },
> 	{ "{smd5}",	PW_SMD5_PASSWORD },
> 	{ "{crypt}",	PW_CRYPT_PASSWORD },
> 	{ "{sha}",	PW_SHA_PASSWORD },
> 	{ "{ssha}",	PW_SSHA_PASSWORD },
> 	{ "{nt}",	PW_NT_PASSWORD },
> 	{ "{nthash}",	PW_NT_PASSWORD },
> 	{ "{x-nthash}",	PW_NT_PASSWORD },
> 	{ "{ns-mta-md5}", PW_NS_MTA_MD5_PASSWORD },
> 	{ "{x- orcllmv}", PW_LM_PASSWORD },
> 	{ "{X- ORCLNTV}", PW_NT_PASSWORD },
> 	{ NULL, 0 }
> };
> 
> -Arran
> 
> 
> 
> On 22 Aug 2011, at 11:46, Det Det wrote:
> 
>> Hi,
>> 
>> I set PAP module as below. In my DB, user attribute is User-Password. Value of User-Password is an MD5 or CRYPT password. Shouldn't auto-header=yes able to detect the encryption scheme used in the password? What will the auto-header setting for if I still have to specifically set attributes such as MD5-Password or Cleartext-Password, etc. 
>> 
>> pap {
>>     auto_header = yes
>> }
>> 
>> thanks,
>> det
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 
> Arran Cudbard-Bell
> a.cudbardb at freeradius.org
> 
> RADIUS - Half the complexity of Diameter
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Arran Cudbard-Bell
a.cudbardb at freeradius.org

RADIUS - Half the complexity of Diameter

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110822/032c9411/attachment.html>


More information about the Freeradius-Users mailing list