freeradius, mysql and encrypted columns

[Alan DeKok]

On Apr 13, 2017, at 12:52 PM, <petr.linke at seznam.cz> <petr.linke at seznam.cz> wrote:
> Of course, you can see the result of query, and DESC_DECRYPT(secret) return correct value (in described case from previous mail return string 'test'). When in the column secret of nas table is plaintext, all is OK. But when in the column secret of nas table is value given via MySQL function DES_ENCRYPT(1,'some_NAS_secret'), and the DES_DECRYPT(secret) returns correct value ('some_NAS_secret'), why freeradius do not accept the correct value given by DES_DECRYPT(secret).

  Hmm... probably because the SQL query is returning the encrypted value, not the decrypted one.

  In the end, I'd put it down to MySQL weirdness.  I'm not sure there's anything that can be done to FreeRADIUS to fix it.

  Alan DeKok.