Free Radius 2.1.1 showing clear text password at the debug mode

[Matthew Newton]

On Thu, Feb 21, 2013 at 05:58:14PM +0800, Danny Kurniawan wrote:
> Thanks a lot. So could you please let me know how can i disabled the output
> (which conf file and what need to be added). Also by saying echo it do i
> need to put something into a config file or just echo command while i'm at
> radiusd - X debug mode?

You can't - FreeRADIUS dumps the entire incoming packet out in
clear text when in debug mode. If you don't want to debug things,
don't run it in debug mode.

With PAP the password is sent in (effectively) clear text. If you
don't want to ever see the password then you need to use something
different that can handle auth without plaintext passwords.

Cheers

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>