Re: password in EAP request

2011-10-06 Thread Stefan Winter
Hi, > >> I was told there is a plugin for FreeRadius that can be used to >> retrieve the username/password of the EAP request. Is this true? > > No...? > > There's http://www.willhackforsushi.com/FreeRADIUS_WPE.html, but it's > not a complete solution in itself... > Uh, what a lame thing. It will

Re: password in EAP request

2011-10-06 Thread Phil Mayers
On 06/10/11 14:19, Alex rsm wrote: I agreed, the EAP message sent from Access Point does not send the password. The client sends the encrypted password. I think I should ask, how FreeRadius can retrieve the password in 802.1x authentication mechanism. FreeRADIUS can read the password from SQL,

Re: password in EAP request

2011-10-06 Thread Arran Cudbard-Bell
> I was told there is a plugin for FreeRadius that can be used to retrieve the > username/password of the EAP request. Is this true? No...? There's http://www.willhackforsushi.com/FreeRADIUS_WPE.html, but it's not a complete solution in itself... -Arran Arran Cudbard-Bell a.cudba...@freerad

Re: password in EAP request

2011-10-06 Thread Fajar A. Nugraha
On Thu, Oct 6, 2011 at 8:06 PM, Alex rsm wrote: > Hi, > > I was told there is a plugin for FreeRadius that can be used to retrieve the > username/password of the EAP request. Is this true? There are two EAP mechanism that sends user password in clear-text: EAP-GTC and EAP-TTLS + PAP. Both of whic

RE: password in EAP request

2011-10-06 Thread Alex rsm
.ac.uk > To: freeradius-users@lists.freeradius.org > Subject: Re: password in EAP request > > On 06/10/11 14:06, Alex rsm wrote: > > Hi, > > > > I was told there is a plugin for FreeRadius that can be used to retrieve > > the username/password of the EAP request.

Re: password in EAP request

2011-10-06 Thread Phil Mayers
On 06/10/11 14:06, Alex rsm wrote: Hi, I was told there is a plugin for FreeRadius that can be used to retrieve the username/password of the EAP request. Is this true? No. As others have said, EAP does not usually send the password. I would advise you go and read up on EAP, and how EAP metho

RE: password in EAP request

2011-10-06 Thread Alex rsm
Hi, I was told there is a plugin for FreeRadius that can be used to retrieve the username/password of the EAP request. Is this true? Thanks, ASM > Date: Wed, 5 Oct 2011 22:01:01 +0100 > From: a.l.m.bu...@lboro.ac.uk > To: freeradius-users@lists.freeradius.org > Subject: Re: pas

Re: password in EAP request

2011-10-05 Thread Alan Buxey
Hi, >In example.pl perl script $RAD_REQUEST{'User-Name'} returns the username >of the EAP request message. How can I get the password of the >EAP request? $RAD_REQUEST{'User-Password'} won't return the password. it certainly wont for PEAPv0/MSCHAPv2 which is what your request looks li

RE: password in EAP request

2011-10-05 Thread Tim Sylvester
In example.pl perl script $RAD_REQUEST{'User-Name'} returns the username of the EAP request message. How can I get the password of the EAP request? $RAD_REQUEST{'User-Password'} won't return the password. [] You can't. RADIUS Access-Request packets that use EAP do not send the password to the RADI

password in EAP request

2011-10-05 Thread Alex rsm
Hi, In example.pl perl script $RAD_REQUEST{'User-Name'} returns the username of the EAP request message. How can I get the password of the EAP request? $RAD_REQUEST{'User-Password'} won't return the password. rad_recv: Access-Request packet from host 24.26.79.31 port 50168, id=207, length=18