allow Clear Text passwords

2009-01-26 Thread Alex M
Hey all, My NAS sends only cleat text password and freeRadius seams to expect CHAP passwors instead... How can I configure FR to accespt clear text passwords? Thanks a lot! PS: My curent default auth-type = system... i tried local but that did not help :( - List info/subscribe/unsubscribe? See

Re: allow Clear Text passwords

2009-01-26 Thread tnt
My NAS sends only cleat text password and freeRadius seams to expect CHAP passwors instead... How can I configure FR to accespt clear text passwords? Thanks a lot! PS: My curent default auth-type = system... i tried local but that did not help :( There is no need for setting Auth-Type. Remove

Re: allow Clear Text passwords

2009-01-26 Thread Alex M
ok here is the debug info. Note: there is an SQL error which is not a problem... thats bug in mysql so it will onlyopen connection from second request. also when i sue the same combination under radius ping with CHAP all works good but w/o chap nothing works rad_recv: Access-Request packet

Re: allow Clear Text passwords

2009-01-26 Thread tnt
ok here is the debug info. Note: there is an SQL error which is not a problem... thats bug in mysql so it will onlyopen connection from second request. also when i sue the same combination under radius ping with CHAP all works good but w/o chap nothing works What freeradius version is this? It

Re: allow Clear Text passwords

2009-01-26 Thread Alex M
I'm using 1.5 (for some reason cold not install 2.x) Ok let me se if i can enable PAP On Mon, Jan 26, 2009 at 3:20 PM, t...@kalik.net wrote: ok here is the debug info. Note: there is an SQL error which is not a problem... thats bug in mysql so it will onlyopen connection from second

Re: allow Clear Text passwords

2009-01-26 Thread Alex M
ok I removed the line from ysers sating that auth-type=system and that helped w/ authentication of the user... still have small problem... under the same conditions I get problem w. accounting stating that my shared secret is incorrect so accounting record is not accepted ... I dont get it

Re: allow Clear Text passwords

2009-01-26 Thread tnt
ok I removed the line from ysers sating that auth-type=system and that helped w/ authentication of the user... still have small problem... under the same conditions I get problem w. accounting stating that my shared secret is incorrect so accounting record is not accepted ... I dont get it

Re: allow Clear Text passwords

2009-01-26 Thread Alex M
wow hows thats possible? 8) My nas has 2 ADIUS servers support, both filds are pointing to the same location w/ same shared secret :( I will try to reboot NAS and radius, maybe that would help On Mon, Jan 26, 2009 at 6:39 PM, t...@kalik.net wrote: ok I removed the line from ysers sating that

Re: allow Clear Text passwords

2009-01-26 Thread tnt
wow hows thats possible? 8) My nas has 2 ADIUS servers support, both filds are pointing to the same location w/ same shared secret :( I will try to reboot NAS and radius, maybe that would help Well, if you have retyped them again (and I mean retype - space in shared secret can easily be the

RE: ntlm_auth and clear-text passwords

2006-07-05 Thread robiwan
] An: FreeRadius users mailing list freeradius-users@lists.freeradius.org Datum: 04.07.2006 05:23 Betreff: RE: ntlm_auth and clear-text passwords -Original Message- On Behalf Of [EMAIL PROTECTED] Users telnet the switch, therefore a clear-text password will be sent. Just

ntlm_auth and clear-text passwords

2006-07-03 Thread robiwan
://lists.freeradius.org/mailman/htdig/freeradius-users/2005-July/045377.html i did this: What you need to do is to configure a *different* ntlm_auth, only for clear-text passwords. The simplest way to do this is to use the exec module: modules { ... exec win_domain { wait = yes

Re: ntlm_auth and clear-text passwords

2006-07-03 Thread Michael Griego
: SOUTH). Users telnet the switch, therefore a clear-text password will be sent. according to an earlier posting http://lists.freeradius.org/mailman/ htdig/freeradius-users/2005-July/045377.html i did this: What you need to do is to configure a *different* ntlm_auth, only for clear-text

RE: ntlm_auth and clear-text passwords

2006-07-03 Thread King, Michael
-Original Message- On Behalf Of [EMAIL PROTECTED] Users telnet the switch, therefore a clear-text password will be sent. Just a completely left field question. Any particular reason you have chosen not to enable SSH on that switch? It's in the IOS (Assuming you have the correct IOS

Re: Clear text passwords

2006-03-24 Thread Bjørn Mork
George C. Kaplan [EMAIL PROTECTED] writes: Alan DeKok wrote: Guy Fraser [EMAIL PROTECTED] wrote: You will have to edit the source code to the detail module to make it do what you want. Is that the way it is supposed to be, or is it on a todo list for it to be fixed? Fixed to do what,

Re: Clear text passwords

2006-03-24 Thread George C. Kaplan
Bjørn Mork wrote: George C. Kaplan [EMAIL PROTECTED] writes: To not log passwords in the detail file, because it puts them at unnecessary risk of exposure. The detail module logs radius packets. If that's not what you want, then you probably shouldn't be using the detail module (except

Clear text passwords

2006-03-23 Thread Corey Burks
text passwords, while still logging the auth request? Or have it log the crypt password strings instead? My radius server is binding to a Netscape LDAP server which is storing the passwords using UNIX crypt. Yet the radius server is logging the clear test password. Thank you for your help. Corey

RE: Clear text passwords

2006-03-23 Thread Alex M
, March 23, 2006 2:55 PM To: freeradius-users@lists.freeradius.org Subject: Clear text passwords I have recently built up a freeradius server V1.1.0, I am new to freeradius, since we were using and old version of Navisradius. In Navisradius it would compare the crypt password strings and log the crypt

RE: Clear text passwords

2006-03-23 Thread Corey Burks
To: 'FreeRadius users mailing list' Subject: RE: Clear text passwords Yes u can hide or crypt passwords in freeradius, this question was raised in freeradius users mailing list, and if you search archives, the answer is there -Original Message- From: [EMAIL PROTECTED] .org [mailto:[EMAIL

Re: Clear text passwords

2006-03-23 Thread Alan DeKok
Corey Burks [EMAIL PROTECTED] wrote: In my radiusd.conf file I made the following changes and it is still logging my password clear text password log_auth = no You will have to edit the source code to the detail module to make it do what you want. Alan DeKok. - List

Re: Clear text passwords

2006-03-23 Thread Guy Fraser
On Thu, 2006-23-03 at 17:44 -0500, Alan DeKok wrote: Corey Burks [EMAIL PROTECTED] wrote: In my radiusd.conf file I made the following changes and it is still logging my password clear text password log_auth = no You will have to edit the source code to the detail module to make it

Re: Clear text passwords

2006-03-23 Thread Alan DeKok
Guy Fraser [EMAIL PROTECTED] wrote: You will have to edit the source code to the detail module to make it do what you want. Is that the way it is supposed to be, or is it on a todo list for it to be fixed? Fixed to do what, and why? No, I'm not being dumb, I'd like to see reasons

Re: Clear text passwords

2006-03-23 Thread George C. Kaplan
Alan DeKok wrote: Guy Fraser [EMAIL PROTECTED] wrote: You will have to edit the source code to the detail module to make it do what you want. Is that the way it is supposed to be, or is it on a todo list for it to be fixed? Fixed to do what, and why? To not log passwords in the

Re: clear text passwords?

2004-06-13 Thread Martin Jessa
Hi Tim. You can hack the portal to change users's password if they change them on the portal. You could of course make freeradius authenticate your users from the portal database as well. FreeRadius should work fine against MSSQL but I have never tested it myself. The passwords will not be sent

RE: clear text passwords?

2004-06-11 Thread freeradius
Hi yazzy. Wow, thanks for your quick reply! I can bet I saw many of your posts on google too... :) Anyway, just wondering, will it be insecure if the user/passwords are just left in clear text on a server? Actually, I don't really like the idea of having a different user/pass for the radius