Re: Proxy and clear-text password

2007-07-04 Thread Luis Galan
Hello! great!! Fantastic!! it works!! Thank you very much for your help. You put me in the right direction and you help me to understand the whole thing. You should work as a teacher :-) I was really lost! Thanks Luis Marcel De Boer escribió: > Hi! > >> The secret key between nas and radius

Re: Proxy and clear-text password

2007-07-03 Thread Marcel De Boer
Hi! > The secret key between nas and radius1 is right. > > In debug mode I receive a clear password: > > Sending Access-Request of id 0 to radius2 port 1645 > User-Password = "estestA243" > <...> > This does not mean you receive a cleartext password, it only means that the shared sec

Re: Proxy and clear-text password

2007-07-02 Thread tnt
>But, with tcpdump, I only see garbage and radius2 receive garbage. As you should. Radius packets are encrypted (that's what the secret is for). >Received Access-Reject packet from client radius2 port 1645 with invalid >signature (err=2)! (Shared secret is incorrect.) Dropping packet >without

Re: Proxy and clear-text password

2007-07-02 Thread A . L . M . Buxey
Hi, > The secret key between nas and radius1 is right. yep. but look a little further down! > rad_recv: Access-Reject packet from host radius2:1645, id=0, length=85 > Received Access-Reject packet from client radius2 port 1645 with invalid > signature (err=2)! (Shared secret is incorrect.) Dro

Re: Proxy and clear-text password

2007-07-02 Thread Luis Galan
Hello! The secret key between nas and radius1 is right. In debug mode I receive a clear password: Sending Access-Request of id 0 to radius2 port 1645 User-Password = "estestA243" NAS-Identifier = "10.1.0.102" User-Name = "[EMAIL PROTECTED]" Acct-Session-Id = "

Re: Proxy and clear-text password

2007-07-02 Thread Alan DeKok
Luis Galan wrote: > It seems that my nas is sending encrypted passwords No. If the User-Password field is garbage in debugging mode, it's because the shared secret is wrong. Fix it. > but radius2 only > accept clear text passwords. And my radius1 is proxying the request of > the [EMAIL PROT

Proxy and clear-text password

2007-07-02 Thread Luis Galan
Hello! I have set up my freeradius 1.1.3 server to use proxy feature. [EMAIL PROTECTED] are redirected to the radius2 which store the usernames and password for that user. It seems that my nas is sending encrypted passwords but radius2 only accept clear text passwords. And my radius1 is prox