Re: (dialupadmin) user edit not showing passwords
On Thu, 10 Mar 2005, Nick Bright wrote: On Thu, 2005-03-10 at 12:18, Kostas Kalevras wrote: On Thu, 10 Mar 2005, Nick Bright wrote: I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_password: yes in my admin.conf file, the dialup_admin pages don't show the users' password anywhere (though I can reset the password properly). Hmm, the comments in admin.conf should be updated. The idea is just to be able to see if a user password exists (hence the corresponding comment in the user edit page) and to reset the value if needed. I strongly disagree with being able to see and edit the user password in clear text (for various reasons) so the above behaviour is not likely to change. Regardless of if you agree with it, it should be an option (though defaulting to off is definately reasonable). You can edit user_edit.attrs to match your needs. You can add the password attribute in the file and set general_show_user_password to no to get the behaviour you want. So i don't see why anthing needs to be changed. The user password attribute is handled specially because it is shown specially (with a password and not a text html field). You can always disable that and configure the user edit page to show the clear text user password. We currently work with two different systems - one where the passwords are visible, and one where they aren't. I'm constantly listening to my techs complain about how much more of a pain in the ass it is to support the accounts that we can't view the passwords for. In short, it makes our lives as tech support people a lot easier to be able to see that password. If you need to see the actual clear text password value you can do what was suggested and add a corresponding line in the user_edit.attrs file. I guess I'll hack something in ;) Ideally I think it should be on the "show" page only, my thought is to put another row on the table in the "Check Password" area that would show the password as in the database - leaving the "check" form, so that a test could still be done. If it /should/ be working, please advise what to check for as I've been poking around for a bit, and don't see anything that would be causing it not to work. -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (dialupadmin) user edit not showing passwords
On Thu, 2005-03-10 at 12:18, Kostas Kalevras wrote: > On Thu, 10 Mar 2005, Nick Bright wrote: > > > I'm storing passwords in plain text, to ease troubleshooting, and even > > though I have general_show_user_password: yes in my admin.conf file, the > > dialup_admin pages don't show the users' password anywhere (though I can > > reset the password properly). > > Hmm, the comments in admin.conf should be updated. The idea is just to be > able > to see if a user password exists (hence the corresponding comment in the user > edit page) and to reset the value if needed. I strongly disagree with being > able > to see and edit the user password in clear text (for various reasons) so the > above behaviour is not likely to change. Regardless of if you agree with it, it should be an option (though defaulting to off is definately reasonable). We currently work with two different systems - one where the passwords are visible, and one where they aren't. I'm constantly listening to my techs complain about how much more of a pain in the ass it is to support the accounts that we can't view the passwords for. In short, it makes our lives as tech support people a lot easier to be able to see that password. > If you need to see the actual clear text password value you can do what was > suggested and add a corresponding line in the user_edit.attrs file. I guess I'll hack something in ;) > > > > > Ideally I think it should be on the "show" page only, my thought is to > > put another row on the table in the "Check Password" area that would > > show the password as in the database - leaving the "check" form, so that > > a test could still be done. > > > > If it /should/ be working, please advise what to check for as I've been > > poking around for a bit, and don't see anything that would be causing it > > not to work. > > > > -- > > - Nick Bright > > Terraworld, Inc > > 888-332-1616 x315 > > http://home.terraworld.net > > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > > > -- > Kostas Kalevras Network Operations Center > [EMAIL PROTECTED] National Technical University of Athens, Greece > Work Phone: +30 210 7721861 > 'Go back to the shadow' Gandalf > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (dialupadmin) user edit not showing passwords
I would have to agree with the idea of passwords not being visable. However, in our situation and maybe even Nick's, if we have a customer call in with issues connecting we typically make sure the ID is correct and have them retype their password. It is nice to be able to see what it is, without having to create a new one every time they would call. It's not an issue for us as there is only two of us that have access to the information. Just my 2 cents. Joel - Original Message - From: "Kostas Kalevras" <[EMAIL PROTECTED]> To: "freeradius-users" Sent: Thursday, March 10, 2005 12:18 PM Subject: Re: (dialupadmin) user edit not showing passwords On Thu, 10 Mar 2005, Nick Bright wrote: I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_password: yes in my admin.conf file, the dialup_admin pages don't show the users' password anywhere (though I can reset the password properly). Hmm, the comments in admin.conf should be updated. The idea is just to be able to see if a user password exists (hence the corresponding comment in the user edit page) and to reset the value if needed. I strongly disagree with being able to see and edit the user password in clear text (for various reasons) so the above behaviour is not likely to change. If you need to see the actual clear text password value you can do what was suggested and add a corresponding line in the user_edit.attrs file. Ideally I think it should be on the "show" page only, my thought is to put another row on the table in the "Check Password" area that would show the password as in the database - leaving the "check" form, so that a test could still be done. If it /should/ be working, please advise what to check for as I've been poking around for a bit, and don't see anything that would be causing it not to work. -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (dialupadmin) user edit not showing passwords
Nick, Yes that would be right. SQL_Column_name Description Joel - Original Message - From: "Nick Bright" <[EMAIL PROTECTED]> To: "freeradius-users" Sent: Thursday, March 10, 2005 12:20 PM Subject: Re: (dialupadmin) user edit not showing passwords On Thu, 2005-03-10 at 11:28, Joel Eddy wrote: Nick, I had the same problem. I'm using MySql and the column is named User-Password I am using MySQL as well, but I didn't change the column from the default name of "Value" The file "user_edit.attrs" in your dialup_admin/conf directory. add to the file above the line Auth-Type User-PasswordUsers Password So this would be of the format: SQL_Column_name Description is that right? or did you mean that you are using "User-Password" as the attribute? in which case it's Attribute_name Description That should do it. Joel - Original Message - From: "Nick Bright" <[EMAIL PROTECTED]> To: "freeradius-users" Sent: Thursday, March 10, 2005 10:55 AM Subject: (dialupadmin) user edit not showing passwords > I'm storing passwords in plain text, to ease troubleshooting, and even > though I have general_show_user_password: yes in my admin.conf file, > the > dialup_admin pages don't show the users' password anywhere (though I > can > reset the password properly). > > Ideally I think it should be on the "show" page only, my thought is to > put another row on the table in the "Check Password" area that would > show the password as in the database - leaving the "check" form, so > that > a test could still be done. > > If it /should/ be working, please advise what to check for as I've been > poking around for a bit, and don't see anything that would be causing > it > not to work. > > -- > - Nick Bright > Terraworld, Inc > 888-332-1616 x315 > http://home.terraworld.net > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (dialupadmin) user edit not showing passwords
On Thu, 2005-03-10 at 11:28, Joel Eddy wrote: > Nick, > > I had the same problem. I'm using MySql and the column is named > User-Password I am using MySQL as well, but I didn't change the column from the default name of "Value" > > > The file "user_edit.attrs" in your dialup_admin/conf directory. > add to the file above the line Auth-Type > > User-PasswordUsers Password So this would be of the format: SQL_Column_name Description is that right? or did you mean that you are using "User-Password" as the attribute? in which case it's Attribute_name Description > > That should do it. > > Joel > > > - Original Message - > From: "Nick Bright" <[EMAIL PROTECTED]> > To: "freeradius-users" > Sent: Thursday, March 10, 2005 10:55 AM > Subject: (dialupadmin) user edit not showing passwords > > > > I'm storing passwords in plain text, to ease troubleshooting, and even > > though I have general_show_user_password: yes in my admin.conf file, the > > dialup_admin pages don't show the users' password anywhere (though I can > > reset the password properly). > > > > Ideally I think it should be on the "show" page only, my thought is to > > put another row on the table in the "Check Password" area that would > > show the password as in the database - leaving the "check" form, so that > > a test could still be done. > > > > If it /should/ be working, please advise what to check for as I've been > > poking around for a bit, and don't see anything that would be causing it > > not to work. > > > > -- > > - Nick Bright > > Terraworld, Inc > > 888-332-1616 x315 > > http://home.terraworld.net > > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > > > > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (dialupadmin) user edit not showing passwords
On Thu, 10 Mar 2005, Nick Bright wrote: I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_password: yes in my admin.conf file, the dialup_admin pages don't show the users' password anywhere (though I can reset the password properly). Hmm, the comments in admin.conf should be updated. The idea is just to be able to see if a user password exists (hence the corresponding comment in the user edit page) and to reset the value if needed. I strongly disagree with being able to see and edit the user password in clear text (for various reasons) so the above behaviour is not likely to change. If you need to see the actual clear text password value you can do what was suggested and add a corresponding line in the user_edit.attrs file. Ideally I think it should be on the "show" page only, my thought is to put another row on the table in the "Check Password" area that would show the password as in the database - leaving the "check" form, so that a test could still be done. If it /should/ be working, please advise what to check for as I've been poking around for a bit, and don't see anything that would be causing it not to work. -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (dialupadmin) user edit not showing passwords
Nick, I had the same problem. I'm using MySql and the column is named User-Password The file "user_edit.attrs" in your dialup_admin/conf directory. add to the file above the line Auth-Type User-PasswordUsers Password That should do it. Joel - Original Message - From: "Nick Bright" <[EMAIL PROTECTED]> To: "freeradius-users" Sent: Thursday, March 10, 2005 10:55 AM Subject: (dialupadmin) user edit not showing passwords I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_password: yes in my admin.conf file, the dialup_admin pages don't show the users' password anywhere (though I can reset the password properly). Ideally I think it should be on the "show" page only, my thought is to put another row on the table in the "Check Password" area that would show the password as in the database - leaving the "check" form, so that a test could still be done. If it /should/ be working, please advise what to check for as I've been poking around for a bit, and don't see anything that would be causing it not to work. -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(dialupadmin) user edit not showing passwords
I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_password: yes in my admin.conf file, the dialup_admin pages don't show the users' password anywhere (though I can reset the password properly). Ideally I think it should be on the "show" page only, my thought is to put another row on the table in the "Check Password" area that would show the password as in the database - leaving the "check" form, so that a test could still be done. If it /should/ be working, please advise what to check for as I've been poking around for a bit, and don't see anything that would be causing it not to work. -- - Nick Bright Terraworld, Inc 888-332-1616 x315 http://home.terraworld.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
