EAP-MD5: Access-Accept packet in debug log message

Axel Luttgens axel.luttgens at skynet.be
Sun Aug 31 10:41:32 CEST 2014


Hello,

While confronting my config attempts with various scenarios, I noticed that the Message-Authenticator seems to always be displayed as a sequence of null bytes:

(1) Sending Access-Accept packet to host 127.0.0.1 port 60546, id=174, length=0
(1) 	EAP-Message = 0x03ad0004
(1) 	Message-Authenticator = 0x00000000000000000000000000000000
(1) 	User-Name = 'bob'
Sending Access-Accept Id 174 from 127.0.0.1:1812 to 127.0.0.1:60546
	EAP-Message = 0x03ad0004
	Message-Authenticator = 0x00000000000000000000000000000000
	User-Name = 'bob'

BTW, out of curiosity, attribute User-Name appears to be unconditionally added to the Acces-Accept packet; is this common practice?

Axel


More information about the Freeradius-Users mailing list