RES: pap: WARNING: Authentication will fail unless a "known good" password is available

[Rafael Labiak Olivastro]

Ahmet,



For PAP authentication you need to set “MD5-Password” and the content must be hashed to MD5.



User-Password and ClearText-Password are used to CHAP, MSCHAP and so on, because the password must be readable to do the chalenges and everything else.



Example:



insert into radcheck (attribute, op, value) VALUES (“MD5-Password”, “:=”, md5(“123456”));



PAP the authentication will be without encrypt (traffic) but the “content” wil be hashed.

So, there´s no security problem in it.



Rafael Labiak Olivastro

http://www.vigo.com.br







________________________________
De: Freeradius-Users <freeradius-users-bounces+rolivastro=hotmail.com at lists.freeradius.org> em nome de Alan DeKok <aland at deployingradius.com>
Enviado: Friday, October 12, 2018 7:23:41 AM
Para: FreeRadius users mailing list
Assunto: Re: pap: WARNING: Authentication will fail unless a "known good" password is available

On Oct 12, 2018, at 7:20 AM, ahmet erkol <ahmeterkol at gmail.com> wrote:
>
> sql {
>        # The sub-module to use to execute queries. This should match
>        # the database you're attempting to connect to.
>        #
>        #    * rlm_sql_mysql
>        #    * rlm_sql_mssql
>        #    * rlm_sql_oracle
>        #    * rlm_sql_postgresql
>        #    * rlm_sql_sqlite
>        #    * rlm_sql_null (log queries to disk)
>
> When i uncomment the rlm_sql_mysql. Service doesn't start. It has failed.

  At this point, you need to start thinking for yourself.

  *Read* the examples.  *Read* the comments.  And *think* about it.  It's really not difficult.  But you're making it difficult.

  You're refusing to do any work yourself, and instead posting question after questions on the list.  This means that you're asking everyone else to do the work for you.

  Well, we're not going to.  If you're too lazy to read the documentation, we're too lazy to explain it to you.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=02%7C01%7C%7Cb9d2850718f7437563ff08d6303538b4%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636749402464525731&sdata=UH1Qksi8hlDLd2co7zhznXp237AmGBVAoTL65It3rak%3D&reserved=0