Re: CISTRON vs. FreeRADIUS :: Extra Bit and/or Case Sensitivity

2003-02-28 Thread Miquel van Smoorenburg
In article [EMAIL PROTECTED],
Ryan Beisner  [EMAIL PROTECTED] wrote:
In FreeRADIUS there is an option to alter the user name's case Before or
After authentication (failure).  I have many users who (even though you
say to use lower case), continue to use a capital letter or two in their
login name.  Since all users are entered into Linux as lower-case, the
authentication fails in CISTRON RADIUSD whereas it had passed in
FreeRADIUS.  (Authentication method is System.)  System is RH8.

Can you force usernames to be rewritten in lowercase on the fly
using CISTRON like you can with FreeRADIUS?   (ie. force lower case
before authentication attempt)

No, you can't. And I'm against it as well: been there, done that. It
only works if you also hack the POP3 and FTP servers the same way,
otherwise those users will call the support desk saying 'your system
is broken, my login/password works for dialing in but not to
POP my mail!'

Mike.
-- 
Anyone who is capable of getting themselves made President should
on no account be allowed to do the job -- Douglas Adams.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


CISTRON vs. FreeRADIUS :: Extra Bit and/or Case Sensitivity

2003-02-25 Thread Ryan Beisner
Hi All-

Well, this is slightly entertaining:

((this is not a FreeRADIUS mis-posting, please read on...))

I've been using FreeRADIUS for a few weeks on a USR Hiper Access 96 bank
dialup rack, authenticating with PAP.  Randomly, a forward slash plus
three digits were being added to the password portion of the
authentication request.  The FreeRADIUS forum folks said it was a glitch
in my W98 client(s) -- they were sometimes sending an extra bit of info
(?).  While I could definitely buy the possibility that MS had once
again screwed up a standard protocol, I decided to try CISTRON RADIUSD.

Guess what?

No more /### at the end of passwords.  Ok, so I don't have people saying
sometimes it accepts my password, and sometimes it doesn't ... what's
going on?   Good deal.  Yeah.

But...



In FreeRADIUS there is an option to alter the user name's case Before or
After authentication (failure).  I have many users who (even though you
say to use lower case), continue to use a capital letter or two in their
login name.  Since all users are entered into Linux as lower-case, the
authentication fails in CISTRON RADIUSD whereas it had passed in
FreeRADIUS.  (Authentication method is System.)  System is RH8.




---== My question is: ==---

---=== Can you force usernames to be rewritten in lowercase on the fly
using CISTRON like you can with FreeRADIUS?   (ie. force lower case
before authentication attempt)




All help and comments on the subject will be greatly appreciated.

TIA!
-Ryan Beisner






...


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: CISTRON vs. FreeRADIUS :: Extra Bit and/or Case Sensitivity

2003-02-25 Thread Alan DeKok
  I *am* reading the freeradius-users list.  Was there any need to
send an extra copy of the message to me, in addition to the list?

Ryan Beisner [EMAIL PROTECTED] wrote:
 I've been using FreeRADIUS for a few weeks on a USR Hiper Access 96 bank
 dialup rack, authenticating with PAP.  Randomly, a forward slash plus

  No, a back-slash.  See your original post:

http://www.mail-archive.com/[EMAIL PROTECTED]/msg13422.html

 three digits were being added to the password portion of the
 authentication request.  The FreeRADIUS forum folks said it was a glitch
 in my W98 client(s) -- they were sometimes sending an extra bit of info
 (?).

  Again, that's *not* what I said.  See my response:

http://www.mail-archive.com/[EMAIL PROTECTED]/msg13424.html


  So it looks like it's a bug in FreeRADIUS.  I'm still wondering why
no one else with a similar setup sees the same problem.

  Try grabbing the latest CVS snapshot of FreeRADIUS and running
that.  Maybe there was a problem during compilation...

 ---=== Can you force usernames to be rewritten in lowercase on the fly
 using CISTRON like you can with FreeRADIUS?   (ie. force lower case
 before authentication attempt)

  Sure.  Edit the source code.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html