Freeradius Solution (CHAP with LDAP encrypted password)

[Winfield, Alister]

Sigh, read the compatibility page...

CHAP requires that the server knows the plaintext password to work. No amount of effort, scripts, magic code will change that.

Alister


On 09/02/2018, 11:13, "Freeradius-Users on behalf of Tsirkas Georgios" <freeradius-users-bounces+alister.winfield=sky.uk at lists.freeradius.org on behalf of geortsir3 at gmail.com> wrote:

    Ok, i understand!
    So i have thought create "fake chap python module" that checks encrypted
    passwords too.
    Then should return ok, and authenticates users with encrypted passwords...


    On 02/08/2018 11:45 PM, Marko Eremija wrote:
    > Hello George,
    >
    > I think that you should take a look at this:
    > http://deployingradius.com/documents/protocols/compatibility.html . It is
    > probably the best guide that you can use. Note the CHAP section.
    >
    > Cheers
    > Marko
    >
    > -----Original Message-----
    > From: Freeradius-Users
    > [mailto:freeradius-users-bounces+marko.eremija=amres.ac.rs at lists.freeradius.org]
    > On Behalf Of Tsirkas Georgios
    > Sent: Thursday, February 08, 2018 8:03 PM
    > To: freeradius-users at lists.freeradius.org
    > Subject: Freeradius Solution (CHAP with LDAP encrypted password)
    >
    > Hello,
    >
    > I am trying connect to a radius client, which can authenticate only with CHAP.
    > Users credentials are stored encrypted in LDAP database.
    > Unfortunately CHAP requires only cleartext password. I dont want to store
    > users credentials plain-text. Is there a solution about it?
    >
    > Thank you,
    >
    > George
    >
    > -
    > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
    >
    >
    > -
    > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

    -
    List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trademarks of Sky plc and Sky International AG and are used under licence.

Sky UK Limited (Registration No. 2906991), Sky-In-Home Service Limited (Registration No. 2067075) and Sky Subscribers Services Limited (Registration No. 2340150) are direct or indirect subsidiaries of Sky plc (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD.