Cleartext password does not match "known good" password

Alan DeKok aland at deployingradius.com
Mon Dec 7 17:12:53 CET 2015


On Dec 7, 2015, at 11:09 AM, Gang Li <gavin.lee.cd at gmail.com> wrote:
> 
> Here's the complete debug msg;
> 
> (0) Received Access-Request Id 70 from 10.0.0.110:1812 to
> 10.0.0.101:1812 length 273
> (0)   User-Name = "admin"
> (0)   User-Password =
> "111111\000\000\000\000\000\000\000\000\000\000\245z\277\023\362*\r\342\302\354\350\374\026\303\337\030"

  That's the problem.  The NAS is broken.  Throw it in the garbage and buy a new one.

  Or, put this into raddb/sites-enabled/default, in the "authorize" section:

authorize {
	update request {
		&Tmp-String-0 := "%{string:User-Password}"
		&User-Password := "%{string:Tmp-String-0}"
	} 

	... everything else...
}

  Posting the debug output is useful.
> 
> (0)   Called-Station-Id =
> "\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377

  That doesn't follow the RFC format.  Your NAS is broken.

  Alan DeKok.




More information about the Freeradius-Users mailing list