Does anybody know of a way to get FreeRadius to handle either crypt OR
clear text encryption schemes for the "pap" module?

For example in radiusd.conf:

pap {
        encryption_scheme = clear
        encryption_scheme = crypt
}

We have some passwords stored in the LDAP password attribute as clear
text (to handle CHAP requests!!!) or they have a value like
"{crypt}GHSN<*&SJJD" (previous migration from old UNIX passwords).
Navis Radius currently looks at the preceding text tokens "{crypt}",
"{plain}", or "{SHA}".  For example the LDAP attribute "unixpassword"
might contain:

unixpassword: {SHA}HDSUYD&#*&$*#$   (WEUDJI (Secure Hash Algorithym)
unixpassword: {crypt}HDSUYD&#*&$*   (UNIX crypt)
unixpassword: mypassword            (plain text)

Thanks,
Pat McShane - ICDC.COM




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to