Re: special characters in passwords + FR + ldap

2006-03-08 Thread Natalia Escalera
Hello, I tried the patch on http://bugs.freeradius.org/showattachment.cgi?attach_id=112 for the function ldap_pairget in the file rlm_ldap.c but it gives me an error when executing the 'make' command saying that 'token' was already declared. This is where token is declared: --

Re: special characters in passwords + FR + ldap

2006-03-08 Thread Turtiainen, Tero
Hi, > From: "Natalia Escalera" <[EMAIL PROTECTED]> > > We have made a small fix to the ldap-module (as seen in the > link to the > > mailing list archive). I don't know if this has been fixed > in 1.1.0. I > > once had a quick look at the ldap-module of 1.1.0, it > should be quite > > easy to tes

Re: special characters in passwords + FR + ldap

2006-03-07 Thread Natalia Escalera
This is what is happening: > > > > > > pass$word -> FR -> LDAP -> FR (Answer: wrong password) > > > > Any ideas of how to solve it? > > This looks very much like the feature we have seen with FR 0.9.3. > Passwords with a "special cha

Re: special characters in passwords + FR + ldap

2006-03-07 Thread Turtiainen, Tero
ening: > > > pass$word -> FR -> LDAP -> FR (Answer: wrong password) > > Any ideas of how to solve it? This looks very much like the feature we have seen with FR 0.9.3. Passwords with a "special character" are truncated, resulting in password check failing.

Re: special characters in passwords + FR + ldap

2006-03-06 Thread Alexei Monastyrnyi
You can try to log passwords sending to FR by NAS and snoop passwords sending by FR to LDAP, + switch on logging on LDAP and check why BIND operation between RF and LDAP fails. The bottom line here is that the password with spec chars is the same all the way down to LDAP server. on 04/03/2006

Re: special characters in passwords + FR + ldap

2006-03-04 Thread Natalia Escalera
on 03/03/2006 00:28 Natalia Escalera wrote: > > Hello all, > > > > Do somebody know how to handle passwords having special characters in > > between (e.g. $ ) when doing freeradius-ldap authentication? > > > > Thank you, > > > > Natalia. > >

Re: special characters in passwords + FR + ldap

2006-03-03 Thread Alexei Monastyrnyi
know how to handle passwords having special characters in between (e.g. $ ) when doing freeradius-ldap authentication? Thank you, Natalia. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

special characters in passwords + FR + ldap

2006-03-02 Thread Natalia Escalera
Hello all, Do somebody know how to handle passwords having special characters in between (e.g. $ ) when doing freeradius-ldap authentication? Thank you, Natalia. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: multiple User-Passwords

2006-03-02 Thread Alan DeKok
Stefan Winter <[EMAIL PROTECTED]> wrote: > That did it. However, I'd like to stick with pure SQL as a backend. Is there > some reason why this doesn't work, or is it just a bug/inflexibility of the > rlm_sql(_mysql) module? It's that much of the time, you *do

multiple User-Passwords

2006-03-02 Thread Stefan Winter
Hi list, again something from the legacy-auth-backend to radius freak cabinet: I need to have more than one password for a small group of users (which had a seperate one for dial-up vs. other services). All of these pw are available in clear text, so I thought I could mis-use the mySQL tables to

cutting User-Passwords after 8 chars

2006-02-28 Thread Stefan Winter
Hello, while migrating some legacy auth to RADIUS, a problem has shown up with users that enter more than 8 chars as their password. The old system truncated the stored passwords after 8 chars, and if a user input more, his input as well got truncated. So, logging in with stored pass

Re: Is it possible to make PAP module understand both CRYPT (MD5) and plaintext passwords?

2006-02-27 Thread Dennis Skinner
Alex Savguira wrote: > Having > pap pap{ > encryption_scheme = crypt > } > pap papplain{ > encryption_scheme = clear > } > If I understand you, then you are redoing what the server already does. FreeRADIUS knows which scheme to use based on the a

Is it possible to make PAP module understand both CRYPT (MD5) and plaintext passwords?

2006-02-26 Thread Alex Savguira
Having pap pap{ encryption_scheme = crypt } pap papplain{ encryption_scheme = clear } Auth-Type PAP { pap } Auth-Type PAPPLAIN { papplain } in radiusd.conf having user1 Crypt-Password := bla

Is it possible to make PAP module understand both CRYPT (MD5) and plaintext passwords?

2006-02-26 Thread Alex Savguira
Exactly as I suggested in original post... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Is it possible to make PAP module understand both CRYPT (MD5) and plaintext passwords?

2006-02-26 Thread A . L . M . Buxey
Hi, > Please ignore... Found the answer already... enlighten us? :-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Is it possible to make PAP module understand both CRYPT (MD5) and plaintext passwords?

2006-02-25 Thread Alex Savguira
Please ignore... Found the answer already... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Is it possible to make PAP module understand both CRYPT (MD5) and plaintext passwords?

2006-02-25 Thread Alex Savguira
Dear All! I wonder is somebody has tried to make PAP understand both plaintext and crypted passwords via multiple instances for example? Would this make sense: pap { encryption_scheme = clear } pap papcrypt { encryption_scheme = crypt } in modules

Re: User passwords in 127.0.0.1/auth-detail file

2006-02-09 Thread Phil Mayers
file. I have tried to search the archive and feel I must me mising something. Can someone please help me figure out what is going on? I want logs and details, just not the user passwords. I think you're missing the point. That's what that is supposed to do. The default confi

User passwords in 127.0.0.1/auth-detail file

2006-02-08 Thread Walter Reynolds
search the archive and feel I must me mising something. Can someone please help me figure out what is going on? I want logs and details, just not the user passwords. Thanks. -- Walter Reynolds University of Michigan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: FreeRadius-1.1.0 - rlm_digest with MD5 passwords in a MySQL db

2006-01-23 Thread Alan DeKok
=?ISO-8859-1?Q?Evan_Borgstr=F6m?= <[EMAIL PROTECTED]> wrote: > I've been spending my day trying to get rlm_digest to work with > encrypted passwords in a MySQL database. It won't work. Digest requires access to the clear-text passwords, OR the Digest-HA1 form of t

Re: FreeRadius-1.1.0 - rlm_digest with MD5 passwords in a MySQL db

2006-01-23 Thread Philippe Sultan
27; process. I don't know whether a similar operation can be expected with 'sql', maybe someone else has an answer. On 1/23/06, Evan Borgström <[EMAIL PROTECTED]> wrote: > Hey All, > >I've been spending my day trying to get rlm_digest to work with > encryp

FreeRadius-1.1.0 - rlm_digest with MD5 passwords in a MySQL db

2006-01-23 Thread Evan Borgström
Hey All, I've been spending my day trying to get rlm_digest to work with encrypted passwords in a MySQL database. When I use the User-Password attribute with a plain text password then digest authentication works fine, however when I change the attribute to MD5-Password I ge

Re: Expired system passwords are still authenticating

2005-11-17 Thread Mark Tunnell
Brian A. Seklecki wrote: Are you expiring passwords are expiring accounts? This doesn't apply to you, but maybe there's an equiv in linux: Thanks. I was thinking along these lines myself. An expired account does deny access while an expired password does not. I may end up

Re: Expired system passwords are still authenticating

2005-11-17 Thread Brian A. Seklecki
Are you expiring passwords are expiring accounts? This doesn't apply to you, but maybe there's an equiv in linux: From FreeBSD pw(8) USER LOCKING The pw utility supports a simple password locking mechanism for users; it works by prepending the string `*LOCKED*' to t

Re: Expired system passwords are still authenticating

2005-11-17 Thread Mark Tunnell
> rlm_unix probably doesn't look at the expiry time of the password. Alan DeKok. Is there an alternative mechanism I could employ that does? Mark - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Expired system passwords are still authenticating

2005-11-17 Thread Alan DeKok
Mark Tunnell <[EMAIL PROTECTED]> wrote: > I've set up a Cisco router to authenticate against a freeradius server > on a Linux box using the local system account. Everything looked > great until I expired the password. If I log into that account on the > Linux box it tells me the password has e

Re: Expired system passwords are still authenticating

2005-11-17 Thread A . L . M . Buxey
Hi, > I've set up a Cisco router to authenticate against a freeradius server > on a Linux box using the local system account. Everything looked > great until I expired the password. If I log into that account on the > Linux box it tells me the password has expired and I need to change > it.

Expired system passwords are still authenticating

2005-11-16 Thread Mark Tunnell
I've set up a Cisco router to authenticate against a freeradius server on a Linux box using the local system account. Everything looked great until I expired the password. If I log into that account on the Linux box it tells me the password has expired and I need to change it. However, if I

Re: Chap,LDAP and Passwords :)

2005-09-28 Thread Alan DeKok
liz <[EMAIL PROTECTED]> wrote: > However, if I turn on CHAP based authentication I get a message from > the radius server that USER-PASSWORD is a required attribute. You set Auth-Type := LDAP. Don't do that. LDAP doesn't understand CHAP. > I am going to try another radius plugin I found toda

Chap,LDAP and Passwords :)

2005-09-28 Thread liz
Greetings!, Please forgive me if this has already been asked. I have googled around as well as checking out a few how-to's. Currently. I have a poptop server, authenticating via freeradius to openldap. Everything appears to be functioning correctly with pap based authentication. However,

Hashed passwords in the users file???

2005-09-20 Thread Miguel Angel Quiles
Hi, does someone know how to use hashed passwords for the users entries in the users file? I hope someone can help me. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Encrypted passwords in the users file

2005-09-07 Thread Miguel Angel Quiles
o know how to encrypt the passwords. I would like to know if I need to install any package. Also, I would like to know how I can create this encrypted passwords. I hope somebody can help me. Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: DialUp Admin And Crypt Passwords

2005-09-04 Thread Geoffrey Cauchi
Hi Further to my previous post, I managed to get around this problem By default, md5 passwords are generated without the key appended. To solve: Change the file /usr/local/dialup_admin/lib/crypt/md5.php3 from with the following I hope this helps someone else :-) Gef -Original

DialUp Admin And Crypt Passwords

2005-09-04 Thread Geoffrey Cauchi
Hi I got the Freeradius version 1.0.4 setup with MySql. It is all working fine. However, when creating users through the dialup admin, the password is stored in the database without the salt key for md5, and this is causing the users' access request to be rejected. If the password is created th

Re: Simple flat file passwords

2005-08-04 Thread Martin . Ward
The answer to a simple problem is, naturally, simple, and my thanks go to Alan for pointing out the obvious. The short version is: Configure the passwd module in the modules section thus: modules { ... ... passwd text_file { filename = /var/text_file format =

Re: Simple flat file passwords?

2005-08-03 Thread Martin . Ward
eradius.org org> cc 03/08/2005 18:17 Subject

Re: Simple flat file passwords?

2005-08-03 Thread Alan DeKok
> I am trying to use the passwd module to configure a simple flat file with > two fields, a user name and a password. I believe I have the module > configured right: > > passwd text_file { > filename = /var/text_file > format = "*User-Name:*User-Password" From th

Simple flat file passwords?

2005-08-03 Thread Martin . Ward
I am trying to use the passwd module to configure a simple flat file with two fields, a user name and a password. I believe I have the module configured right: passwd text_file { filename = /var/text_file format = "*User-Name:*User-Password" authtype

Re: ntlm_auth w/ plain test passwords to Windows 2003 domain

2005-07-14 Thread Alan DeKok
"Ken George" <[EMAIL PROTECTED]> wrote: > Still unable to get this to work via freeradius, but works with > ntlm_auth from the command line. > > [EMAIL PROTECTED] raddb]# ntlm_auth --username="test ops" > --password=m1sg0ps --domain=usmisgnet --request-NT-key ... > Exec-Program: /usr/bin/ntlm_auth

Re: customer with wrong passwords

2005-07-05 Thread Alan DeKok
Vects <[EMAIL PROTECTED]> wrote: > I want to implement default 'catch all' rules in radius for customers > with wrong passwords, they suppose to be connected and redirected to > some web proxy. In the same time that default shouldn't concern > customers with

customer with wrong passwords

2005-07-04 Thread Vects
Hi there, I want to implement default 'catch all' rules in radius for customers with wrong passwords, they suppose to be connected and redirected to some web proxy. In the same time that default shouldn't concern customers with correct passwords. Is below correct for my purpos

Re: passwords

2005-06-07 Thread Dean Mumby
is to know where to start looking for the problem. If I create a user using the dialup admin , the user is created. If I search I can find it but no matter what I do I cannot get it to check the password and tell me its correct. It always says its wrong. Even with simple 1234 passwords. Could

Re: passwords

2005-06-06 Thread Sarkis Gabriel
start looking for the problem. If I create a user using the dialup admin , the user is created. If I search I can find it but no matter what I do I cannot get it to check the password and tell me its correct. It always says its wrong. Even with simple 1234 passwords. Could it be a problem with the

Re: passwords

2005-06-06 Thread Dean Mumby
I cannot get it to check the password and tell me its correct. It always says its wrong. Even with simple 1234 passwords. Could it be a problem with the encryption routines ? Is it a php problem. This is an up2date centos 3.4 box. Any Ideas ? Regards Dean -- No virus found in this

passwords

2005-06-06 Thread Dean Mumby
Hi all , firstly I installed 1.0.1-1 for centos 3.4 and then downloaded the latest 1.0.3 tar ball and installed dialup_admin. I am able to add users but when I test a password it always says failed. Is there a setting that I have missed somewhere that controls whether the pasword are crypt or n

Re: (dialupadmin) user edit not showing passwords

2005-03-10 Thread Kostas Kalevras
On Thu, 10 Mar 2005, Nick Bright wrote: On Thu, 2005-03-10 at 12:18, Kostas Kalevras wrote: On Thu, 10 Mar 2005, Nick Bright wrote: I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_password: yes in my admin.conf file, the dialup_admin

Re: (dialupadmin) user edit not showing passwords

2005-03-10 Thread Nick Bright
On Thu, 2005-03-10 at 12:18, Kostas Kalevras wrote: > On Thu, 10 Mar 2005, Nick Bright wrote: > > > I'm storing passwords in plain text, to ease troubleshooting, and even > > though I have general_show_user_password: yes in my admin.conf file, the > > dialup_adm

Re: (dialupadmin) user edit not showing passwords

2005-03-10 Thread Joel Eddy
I would have to agree with the idea of passwords not being visable. However, in our situation and maybe even Nick's, if we have a customer call in with issues connecting we typically make sure the ID is correct and have them retype their password. It is nice to be able to see what it is, wi

Re: (dialupadmin) user edit not showing passwords

2005-03-10 Thread Joel Eddy
Nick, Yes that would be right. SQL_Column_name Description Joel - Original Message - From: "Nick Bright" <[EMAIL PROTECTED]> To: "freeradius-users" Sent: Thursday, March 10, 2005 12:20 PM Subject: Re: (dialupadmin) user edit not showing passwords On Thu, 2005

Re: (dialupadmin) user edit not showing passwords

2005-03-10 Thread Nick Bright
the attribute? in which case it's Attribute_name Description > > That should do it. > > Joel > > > - Original Message - > From: "Nick Bright" <[EMAIL PROTECTED]> > To: "freeradius-users" > Sent: Thursday, Marc

Re: (dialupadmin) user edit not showing passwords

2005-03-10 Thread Kostas Kalevras
On Thu, 10 Mar 2005, Nick Bright wrote: I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_password: yes in my admin.conf file, the dialup_admin pages don't show the users' password anywhere (though I can reset the password prop

Re: (dialupadmin) user edit not showing passwords

2005-03-10 Thread Joel Eddy
-- From: "Nick Bright" <[EMAIL PROTECTED]> To: "freeradius-users" Sent: Thursday, March 10, 2005 10:55 AM Subject: (dialupadmin) user edit not showing passwords I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_passwor

(dialupadmin) user edit not showing passwords

2005-03-10 Thread Nick Bright
I'm storing passwords in plain text, to ease troubleshooting, and even though I have general_show_user_password: yes in my admin.conf file, the dialup_admin pages don't show the users' password anywhere (though I can reset the password properly). Ideally I think it should be on

RE: Web interface similar to Dialup Admin but for dialup users to change their login passwords.

2005-02-04 Thread Cris Boisvert
:[EMAIL PROTECTED] On Behalf Of Kostas Kalevras Sent: Friday, February 04, 2005 10:21 AM To: freeradius-users@lists.freeradius.org Subject: Re: Web interface similar to Dialup Admin but for dialup users to change their login passwords. On Fri, 4 Feb 2005, Shannon Sariman wrote: > Hi All, >

Re: Web interface similar to Dialup Admin but for dialup users to change their login passwords.

2005-02-04 Thread Kostas Kalevras
On Fri, 4 Feb 2005, Shannon Sariman wrote: Hi All, I am using freeradius with mysql and dialup admin. Is there any open source solution out there that can cater for dialup users to manually change their password using a similar web interface like dialup admin? Please help. Not that i know of. dia

Web interface similar to Dialup Admin but for dialup users to change their login passwords.

2005-02-03 Thread Shannon Sariman
Hi All,   I am using freeradius with mysql and dialup admin. Is there any open source solution out there that can cater for dialup users to manually change their password using a similar web interface like dialup admin? Please help.   Regards,   Shannon

Re: Autz-Type, auth without passwords

2005-01-18 Thread Kostas Kalevras
On Mon, 17 Jan 2005, Robert Tarrall wrote: HOWEVER - we're now accepting everyone, even when the authorize module returns notfound. That's not what we want. From radiusd.conf: authorize { preprocess suffix autztype ecentralldap { ecentralldap } aut

Autz-Type, auth without passwords

2005-01-17 Thread Robert Tarrall
, and have more than one LDAP instance. We still don't want to check passwords. I.e. if we get a request for [EMAIL PROTECTED] we should accept it if dn=tarrall,ou=ecentral,blah=blah is found in LDAP, and reject otherwise; if we get a request for [EMAIL PROTECTED] we'll check for dn=tar

Re: md5-hash stored passwords

2005-01-03 Thread Stefan Winter
Hi! > I know that the client (supplicant) send a hash (is it a md5 hash???) to the > RADIUS-Server. The RADIUS-Server have the > plaintext password so it can perform the same hash to determine that the > password is correct. Now i want to store the > passwords as a md5-hash in

md5-hash stored passwords

2005-01-03 Thread Ole Adam
want to store the passwords as a md5-hash in the users file. Is it possible to authenticate against a md5-hash database? How can i say the RADIUS-Server that the password is already a MD5-Hash??

md5-hash stored passwords

2005-01-02 Thread ole.adam
I use the freeradius for EAP-MD5 in a wired lan. I know that the client (supplicant) send a hash (is it a md5 hash???) to the RADIUS-Server. The RADIUS-Server have the plaintext password so it can perform the same hash to determine that the password is correct. Now i want to store the passwords as

Re: Problem with passwords

2004-12-22 Thread Kyriaki Gali
blem with passwords I also encountered the same problem.For this to work i made one change in the radiusd.conf i.e encryption-scheme = clear Please let me know if i am missing anything. Thanks in Advance, vamsi -Original Message-From: [EMAIL PROTECTED] [mail

RE: Problem with passwords

2004-12-22 Thread vamsikv
Kyriaki GaliSent: Wednesday, 22 December 2004 8:00 PMTo: freeradius-users@lists.freeradius.orgSubject: Problem with passwords Hello, does anyone know what is the difference between CHAP-Password and PAP-Password?   Because if i use CHAP working fine and if i use PAP rejects me

Re: Problem with passwords

2004-12-22 Thread Kostas Kalevras
On Wed, 22 Dec 2004, Kyriaki Gali wrote: Hello, does anyone know what is the difference between CHAP-Password and PAP-Password? Because if i use CHAP working fine and if i use PAP rejects me. http://www.freeradius.org/faq/#4.4 Thanks, Kyriaki Gali, IT Applications Specialist Kinetix Tele.com Supp

Problem with passwords

2004-12-22 Thread Kyriaki Gali
Hello, does anyone know what is the difference between CHAP-Password and PAP-Password?   Because if i use CHAP working fine and if i use PAP rejects me.     Thanks, Kyriaki Gali,IT Applications SpecialistKinetix Tele.com Support Center,Tel & Fax: +30 2310 256140GSM: +30 6947 723737http://www

using LDAP and one-time passwords [Virus checked]

2004-12-01 Thread Stefan . Wiederoder
hello, we have all our user-informations stored in an LDAP-directory, but our users should use one-time password tokens instead of static passwords for their remote login. it is possible to configure freeradius to first check whether the user is allowed to dialin using an ldap-group and then

Re: Freeradius + MySQL + MD5 passwords

2004-11-22 Thread Kostas Kalevras
On Fri, 19 Nov 2004, Hamilton Vera wrote: Hi masters. I am looking for a tutorial/how-to to set up a radius server using freeradius and Mysql and MD5 passwords. Actually I have a Livingston Portmaster 3 authenticating users on my linux server. The authentication is based on MD5 passwords stored in

Freeradius + MySQL + MD5 passwords

2004-11-19 Thread Hamilton Vera
Hi masters. I am looking for a tutorial/how-to to set up a radius server using freeradius and Mysql and MD5 passwords. Actually I have a Livingston Portmaster 3 authenticating users on my linux server. The authentication is based on MD5 passwords stored in /etc/shadow, for example $1$u5C6uZb

Re: Success PEAP/MSCHAPv2 + LDAP + Samba passwords

2004-11-10 Thread Alan DeKok
Christophe Boyanique <[EMAIL PROTECTED]> wrote: > I don't know it there is a bug in freeradius, but the radeapclient is > not linked correctly by libtool. Instead of the binary, the libtool > wrapper remains in the installed path. I tried on Debian unstable (with > included or system libtool) an

Re: Success PEAP/MSCHAPv2 + LDAP + Samba passwords

2004-11-10 Thread Alan DeKok
"Berry, William" <[EMAIL PROTECTED]> wrote: > Personally think that clear text is bad as anyone intercepting the packets > can easily pick up anything in clear text. RADIUS passwords are encrypted. Connections from FreeRADIUS to an LDAP server should be encrypted us

RE: Success PEAP/MSCHAPv2 + LDAP + Samba passwords

2004-11-10 Thread Stefan . Neis
Hi, > Personally think that clear text is bad as anyone intercepting the > packets can easily pick up anything in clear text. You mean intercepting the packets between LDAP server and RADIUS server (since the communication with the RADIUS client isn't affected anyway)? But knowing the LM

RE: Success PEAP/MSCHAPv2 + LDAP + Samba passwords

2004-11-10 Thread Berry, William
Title: RE: Success PEAP/MSCHAPv2 + LDAP + Samba passwords Personally think that clear text is bad as anyone intercepting the packets can easily pick up anything in clear text. If one knows specifically that traffic is one a completely secure path from end to end then not such an issue. This

Re: Success PEAP/MSCHAPv2 + LDAP + Samba passwords

2004-11-10 Thread Stefan . Neis
Hi, > OpenLDAP with NT and LM hashed samba password After having read similar stuff several times in the past weeks, what's the real advantage of using NT or LM hashed passwords over using simple clear text passwords? At least securitywise, I can't see any.

Success PEAP/MSCHAPv2 + LDAP + Samba passwords

2004-11-10 Thread Christophe Boyanique
eeded } authenticate { Auth-Type MS-CHAP { mschap } eap } During the authorize phase, the ldap module searches the user and keep track of the NT and/or LM passwords if there are present. During the authenticate phase, the mschap module use the previously

RE: ldap authentication - crypt passwords

2004-11-02 Thread Ossama Suleiman
: Tuesday, November 02, 2004 3:00 PM To: freeradius-users Subject: Re: ldap authentication - crypt passwords On Tue, 2 Nov 2004, Ossama Suleiman wrote: > Dear All, > > i set up FR to use LDAP authentication. > when using clear password, everything is working ok.. but actually i want to &

Re: ldap authentication - crypt passwords

2004-11-02 Thread Kostas Kalevras
On Tue, 2 Nov 2004, Ossama Suleiman wrote: Dear All, i set up FR to use LDAP authentication. when using clear password, everything is working ok.. but actually i want to store crypt passwords. as soon as using crypt passwords, authentication failed. i was using radiusauthtype = LDAP, i tried to

ldap authentication - crypt passwords

2004-11-02 Thread Ossama Suleiman
Dear All, i set up FR to use LDAP authentication. when using clear password, everything is working ok.. but actually i want to store crypt passwords. as soon as using crypt passwords, authentication failed. i was using radiusauthtype = LDAP, i tried to switch to PAP, and setting passwordheader

Re: EAP with hashed passwords in LDAP?

2004-10-06 Thread Alan DeKok
Simeon Miteff <[EMAIL PROTECTED]> wrote: > I have ldap servers with crypt, MD5, and SSHA passwords, is there any > EAP flavor (EAP-) that will work with this? I desperately don't want > to maintain two passwords attributes for each user! EAP-TTLS with tunneled PAP or E

EAP with hashed passwords in LDAP?

2004-10-06 Thread Simeon Miteff
Hi All For obvious reasons, challenge-response type EAP authentication mechanisms like EAP-MD5 won't work with hashed passwords in LDAP. I have ldap servers with crypt, MD5, and SSHA passwords, is there any EAP flavor (EAP-) that will work with this? I desperately don't want t

Re: Users-file, PEAP and cleartext passwords

2004-09-08 Thread Vidar Stokke
Alan DeKok wrote: > Vidar Stokke <[EMAIL PROTECTED]>wrote: > >>My users file entry looks like this: >> >>myuser NT-Password == "C275AA106060E0D793DD673EC6620090" > > > Try := > > Alan DeKok. > Thanx a lot, Alan. That worked great. regards Vidar - List info/subscribe/unsubscribe? See http://www

Passwords in LDAP aren't found...

2004-09-07 Thread Alan DeKok
"Alexandre Durand" <[EMAIL PROTECTED]> wrote: > I've seen the debug but i don't understand and nobody seems to want help me. > So i begin to think that i'm going to abort!! So... post the debug output here. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/us

Re: Users-file, PEAP and cleartext passwords

2004-09-06 Thread Alan DeKok
Vidar Stokke <[EMAIL PROTECTED]>wrote: > My users file entry looks like this: > > myuser NT-Password == "C275AA106060E0D793DD673EC6620090" Try := Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Users-file, PEAP and cleartext passwords

2004-09-06 Thread Vidar Stokke
Hi. I've been looking around and I can't seem to find a solution to my problem. My problem is that when I try to connect to a dot1x-network using EAP/PEAP on a win-xp-client, I can't use a users-file with encrypted passwords. I've tried to use the NT-Password attribute and

Solved: setup to have 2 passwords for each user

2004-09-02 Thread Thor Spruyt
t; ... > } I now have the following in radiusd.conf: authorize { files group { sql1 { ok = return notfound = 1 } sql2 } } (sql1 and sql2 just retrieve the password for the user from 2 different tables) This results in the

Re: Authenticate - passwords in posgresql with sha1

2004-08-23 Thread Alan DeKok
Ivan =?ISO-8859-1?Q?Hern=E1ndez?= Serrano <[EMAIL PROTECTED]> wrote: > The question is: Is there any chance that I can use my passwords in > sha1? See rlm_pap. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Authenticate - passwords in posgresql with sha1

2004-08-22 Thread Ivan Hernández Serrano
Hi, I'm using my freeradius-1.0.0 with Postgresql (7.4.2), everything goes fine. Now, I'm trying to authenticate to my users using my existing user/password database infrastructure, the thing is that the passwords in my database are not in clear text, they are stored using sha1 and a

Ascend NAS sending only CHAP passwords.

2004-08-20 Thread Rodolfo Gonzalez Gonzalez
Hello, Sorry for the long post. I've installed freeradius 1.0.0 on a slackware box. I'm trying to make it work against my ISP's Ascend Max40xx. I'm supporting only PAP on my side, my users are on a MySQL db, with crypt'ed passwords. I can only connect if I force PAP o

Re: Converting flat-file users files and system passwords to mysql

2004-08-11 Thread Nick Hall
> especially as it means I won't have to tell the server to reload its > config each time I add a user, but to do that I'll need both to convert > the current users files to mysql entries and extract the passwords from > /etc/shadow. > > Are there any script

Converting flat-file users files and system passwords to mysql

2004-08-11 Thread Rens Houben
ql to work on a few other systems I've had to set up I'd like to go with that on the new machines, especially as it means I won't have to tell the server to reload its config each time I add a user, but to do that I'll need both to convert the current users files to mysql ent

Two times authorization using same login but different passwords (users != sql)

2004-08-10 Thread Bastien
Hi there :) I'm trying to setup FreeRADIUS to work with two times authorization with two different hardware using the same login but two different passwords. The first request is sent by some Network Access Server (NAS) using user's login and some password like 'cisco' to

Re: Allowing both PAP and CHAP with a mixture of clear text and encrypted passwords

2004-07-16 Thread Kostas Kalevras
On Thu, 15 Jul 2004, Mike Lampson wrote: > >> Is it possible to make radius tell the dial equipemnt to send the > >> password in clear text if it can't authenticate a CHAP password? > > No. > > In many cases, the NAS can't even control it. The client uses > > CHAP, and there's no way for the NA

Re: Allowing both PAP and CHAP with a mixture of clear text and encrypted passwords

2004-07-15 Thread Mike Lampson
>> Is it possible to make radius tell the dial equipemnt to send the >> password in clear text if it can't authenticate a CHAP password? > No. > In many cases, the NAS can't even control it. The client uses > CHAP, and there's no way for the NAS to tell it to use PAP. We had a case of a service

Re: Allowing both PAP and CHAP with a mixture of clear text and encrypted passwords

2004-07-15 Thread Alan DeKok
Jeremy Kusnetz <[EMAIL PROTECTED]> wrote: > Is it possible to make radius tell the dial equipemnt to send the > password in clear text if it can't authenticate a CHAP password? No. In many cases, the NAS can't even control it. The client uses CHAP, and there's no way for the NAS to tell it t

Allowing both PAP and CHAP with a mixture of clear text and encrypted passwords

2004-07-15 Thread Jeremy Kusnetz
So we need to be able to support both PAP and CHAP. We have a mixture of cleartext and encrypted passwords. Ideally we would like to have PAP used for the encrypted passwords and either PAP or CHAP for the clear text. I am testing things out with an Ascend MAX authenticating against an

Re: using free radius with TTLS/PEAP with MD5 hashed passwords

2004-06-16 Thread Alan DeKok
Robert Yeo <[EMAIL PROTECTED]> wrote: > After reading the documentation, it seems that when TTLS or PEAP is used, > there needs to be a text file or database with usernames and passwords in > clear text No. TTLS & PEAP have tunneled authentication methods. Those tunn

Re: using free radius with TTLS/PEAP with MD5 hashed passwords

2004-06-16 Thread Kostas Kalevras
On Wed, 16 Jun 2004, Robert Yeo wrote: > After reading the documentation, it seems that when TTLS or PEAP is used, > there needs to be a text file or database with usernames and passwords in > clear text PEAP needs clear text TTLS depends on the inner authentication mechanism. If you us

using free radius with TTLS/PEAP with MD5 hashed passwords

2004-06-16 Thread Robert Yeo
After reading the documentation, it seems that when TTLS or PEAP is used, there needs to be a text file or database with usernames and passwords in clear text ... Currently, what we have is a MSSQL database which has a table of usernames and passwords hashed using MD5... there is also a procedure

Re: clear text passwords?

2004-06-13 Thread Martin Jessa
Hi Tim. You can hack the portal to change users's password if they change them on the portal. You could of course make freeradius authenticate your users from the portal database as well. FreeRadius should work fine against MSSQL but I have never tested it myself. The passwords will not be

Re: MD5-hashed passwords?

2004-06-11 Thread Alan DeKok
<[EMAIL PROTECTED]> wrote: > Questions: Are there any authentication protocols (that can use MD5 hashed > passwords) that I could use to authenticate the wireless users? No. > I read the section about using PAP, but should I use it, does it > mean that the user/pass will b

Re: MD5-hashed passwords?

2004-06-11 Thread Kostas Kalevras
gt; move away from using MAC filters (for about 250 users so far) and use a > radius solution. The students each have access to a portal, but the > passwords are all hashed with MD5 and stored in a MSSQL database. > > Questions: Are there any authentication protocols (that can use MD5 has

<    1   2   3   4   5   6   >