sha512 format

Noel Butler noel.butler at ausics.net
Sat Aug 29 04:01:37 CEST 2015


On 28/08/2015 22:10, Arran Cudbard-Bell wrote:
>> On 28 Aug 2015, at 00:54, Noel Butler <noel.butler at ausics.net> wrote:
>> 
>> Howdy,
>> 
>> Building new radius setup, and in test bed using freeradius at 
>> present, I see v3 uses SHA-2, great, it's what we are trying, but when 
>> inserting into mariadb   $6$salt$foobarqwerty....  does not seems not 
>> to work (clear text of course does but thats not an option in 2015) 
>> does it expect it in some other format?
> 
> FreeRADIUS doesn't need to support SHA2 for this, you just need to put
> the password in the right control attribute, so FreeRADIUS will treat
> it as a crypt password.
> 
> update control {
> 	&Crypt-Password := "<value from db or other attribute>"
> }
> pap
> 
> FreeRADIUS will then call crypt(), and if your system's crypt function
> understands the format, it should all work fine.
> 



Thanks, yes it does support it, now I have a good starting point to 
follow.
Cheers





More information about the Freeradius-Users mailing list