rlm_digest failing after upgrade from 2.1.12 to 2.2.5
Daniel Pocock
daniel at pocock.pro
Wed Oct 21 10:17:23 CEST 2015
Hi,
We just updated a Debian server from wheezy to jessie
The freeradius server package updated
from 2.1.12+dfsg-1.2
to 2.2.5+dfsg-0.2
This particular server is used for SIP users (for debian.org itself)
The users are in a text file and it is loaded like this in radiusd.conf:
modules {
$INCLUDE modules/attr_filter
$INCLUDE modules/digest
passwd rtc_users {
filename = /var/local/rtc-passwords.freerad
format = "*User-Name:Digest-HA1:"
hashsize = 1000
ignorenislike = no
allowmultiplekeys = no
}
}
Since the upgrade, the server is complaining:
Auth: [digest] Cleartext-Password or Digest-HA1 is required for
authentication.
When the server is started or given HUP, it doesn't give any hints that
anything is wrong:
Wed Oct 21 07:51:05 2015 : Info: Received HUP signal.
Wed Oct 21 07:51:05 2015 : Info: HUP - Re-reading configuration files
Wed Oct 21 07:51:05 2015 : Info: HUP - loading modules
Wed Oct 21 07:51:05 2015 : Info: Module: Reloaded module
"attr_filter.access_reject"
Wed Oct 21 07:51:05 2015 : Info: Module: Reloaded module "rtc_users"
Wed Oct 21 07:51:05 2015 : Info: Loaded virtual server <default>
Wed Oct 21 07:51:05 2015 : Info: Loaded virtual server rtc.debian.org
I looked at the changelog, it only mentions passwd in one place and
digest is not mentioned anywhere:
FreeRADIUS 2.2.0 Mon 10 Sep 2012 12:00:00 CEST, urgency=medium
Feature improvements
* 100% configuration file compatible with 2.1.x.
The only fix needed is to disallow "hashsize=0" for rlm_passwd
The freeradius-client library is being used, it is the same version
before and after the upgrade, 1.1.6.
Can anybody give any feedback on this or suggest the best way to
troubleshoot the issue?
Regards,
Daniel
More information about the Freeradius-Users
mailing list