rlm_digest failing after upgrade from 2.1.12 to 2.2.5

Daniel Pocock daniel at pocock.pro
Wed Oct 21 10:17:23 CEST 2015



Hi,

We just updated a Debian server from wheezy to jessie

The freeradius server package updated
   from 2.1.12+dfsg-1.2
   to 2.2.5+dfsg-0.2

This particular server is used for SIP users (for debian.org itself)

The users are in a text file and it is loaded like this in radiusd.conf:

modules {
  $INCLUDE modules/attr_filter
  $INCLUDE modules/digest

  passwd rtc_users {
    filename = /var/local/rtc-passwords.freerad
    format = "*User-Name:Digest-HA1:"
    hashsize = 1000
    ignorenislike = no
    allowmultiplekeys = no
  }
}


Since the upgrade, the server is complaining:


Auth: [digest] Cleartext-Password or Digest-HA1 is required for
authentication.


When the server is started or given HUP, it doesn't give any hints that
anything is wrong:


Wed Oct 21 07:51:05 2015 : Info: Received HUP signal.
Wed Oct 21 07:51:05 2015 : Info: HUP - Re-reading configuration files
Wed Oct 21 07:51:05 2015 : Info: HUP - loading modules
Wed Oct 21 07:51:05 2015 : Info:  Module: Reloaded module
"attr_filter.access_reject"
Wed Oct 21 07:51:05 2015 : Info:  Module: Reloaded module "rtc_users"
Wed Oct 21 07:51:05 2015 : Info: Loaded virtual server <default>
Wed Oct 21 07:51:05 2015 : Info: Loaded virtual server rtc.debian.org


I looked at the changelog, it only mentions passwd in one place and
digest is not mentioned anywhere:

   FreeRADIUS 2.2.0 Mon 10 Sep 2012 12:00:00 CEST, urgency=medium
        Feature improvements
        * 100% configuration file compatible with 2.1.x.
          The only fix needed is to disallow "hashsize=0" for rlm_passwd


The freeradius-client library is being used, it is the same version
before and after the upgrade, 1.1.6.

Can anybody give any feedback on this or suggest the best way to
troubleshoot the issue?

Regards,

Daniel


More information about the Freeradius-Users mailing list