Problem using hased passwords

[Alan DeKok]

On Jun 30, 2023, at 6:46 AM, Michael Schwartzkopff via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> I am trying to use a hased password, but I get the error:
> 
> pap: ERROR: SHA1 digest does not match "known good" digest
> 
> from the eap_gtc module.
> 
> According to the compatibility matrix this should work.

  Hmm, yes.  It should work.

  I do this:

update control {
	&SHA1-Password := "%{sha1:hello}"
}
pap.authenticate
...

  And the debug output shows:

Fri Jun 30 07:25:14 2023 : Debug: (0) pap: Login attempt with password "hello" (5)
Fri Jun 30 07:25:14 2023 : Debug: (0) pap: Comparing with "known-good" SHA-Password
Fri Jun 30 07:25:14 2023 : Debug: (0) pap: User authenticated successfully
Fri Jun 30 07:25:14 2023 : Debug: (0)       modsingle[authenticate]: returned from pap (rlm_pap)
Fri Jun 30 07:25:14 2023 : Debug: (0)       [pap] = ok
Fri Jun 30 07:25:14 2023 : Debug: (0)     } # authenticate = ok

  I'm not sure what else is going on

  Maybe change SHA-Password to SHA1-Password?  I ran into an issue here related to that which might affect it.  I'll try to track that down.

  Alan DeKok.