, July 24, 2007 6:22:27 PM (GMT+0200) Asia/Jerusalem
Subject: Re: rml_perl question
FreeRadius-ML wrote:
Yes, that was the initial idea. However, $RAD_CHECK{User-Password}, at
least according to
my log file doesn't exist:
I don't understand. Did you update the Perl script to set
Hi,
you dont have perl enabled in the authorise section of your config...you
dont have digest enabled in your authorise or authenticate sections
either. what are you trying to acheive?
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-users@lists.freeradius.org
Sent: Wednesday, July 25, 2007 2:12:55 PM (GMT+0200) Asia/Jerusalem
Subject: Re: rml_perl question
Hi,
you dont have perl enabled in the authorise section of your config...you
dont have digest enabled in your authorise or authenticate sections
either. what are you trying
FreeRadius-ML wrote:
Of course I updated the PERL script. I simply modified the debug function
to be:
And you did NOT add $RAD_CHECK{Cleartext-Password} = ... as you were
instructed to do.
I hadn't set Auth-Type in radiusd.conf, according to references I've
recieved,
the only
25, 2007
2:12:55 PM (GMT+0200) Asia/Jerusalem Subject: Re: rml_perl question
Hi,
you dont have perl enabled in the authorise section of your config...you
dont have digest enabled in your authorise or authenticate sections
either. what are you trying to acheive?
--
Peter Nixon
http
/Jerusalem
Subject: Re: rml_perl question
Several people have already told you this, but I am going to have another go
at it.
You want to do Digest Authentication. That great. FreeRADIUS knows how to do
it. All you have to do is supply the Cleartext-Password.
You tell us that you have some
On Wed 25 Jul 2007, FreeRadius-ML wrote:
Hi Peter,
Thanks, that was the missing part for me - I think. Just let me verify
that I got you correctly:
1. My OpenSER will send a request to FreeRadius including the full
digest information.
2. Once the request in intercepted by FreeRadius,
Subject: Re: rml_perl question
On Wed 25 Jul 2007, FreeRadius-ML wrote:
Hi Peter,
Thanks, that was the missing part for me - I think. Just let me verify
that I got you correctly:
1. My OpenSER will send a request to FreeRadius including the full
digest information.
2. Once the request
Hi All,
I've been tinkering with rlm_perl for a few days now, and found it to be
fairly simple
and straight forward. However, there is something that I'm a little unsure
about it's possibility,
so I would like to address the list about it.
My aim is to have my rlm_perl script connect to a
Hello,
first you have to check if your perl is thread safe. perl -V | grep
THREAD will show.
And based on that info you can have 2 choices:
1) perl threads present
In this case you should use special subroutine called CLONE and
initialize socket here. This sub is called when rlm_perl is
@lists.freeradius.org
Cc: Boian Jordanov [EMAIL PROTECTED]
Sent: Tuesday, July 24, 2007 11:06:09 AM (GMT+0200) Asia/Jerusalem
Subject: Re: rml_perl question
Hello,
first you have to check if your perl is thread safe. perl -V | grep
THREAD will show.
And based on that info you can have 2 choices:
1) perl
On Tue 24 Jul 2007, FreeRadius-ML wrote:
Thanks, that helps a bunch.
Another question, may be non related. Anyone has an idea how does OpenSER
and FreeRadius calculate the Digest response for rlm_digest?
According to the output of my rlm_perl RAD_REQUEST, I'm getting the
following request
/Jerusalem
Subject: Re: rml_perl question
On Tue 24 Jul 2007, FreeRadius-ML wrote:
Thanks, that helps a bunch.
Another question, may be non related. Anyone has an idea how does OpenSER
and FreeRadius calculate the Digest response for rlm_digest?
According to the output of my rlm_perl RAD_REQUEST
: Re: rml_perl question
Hi Peter,
Well, according to the RFC, the string should be:
username:realm:password and then into the md5sum.
Now, according to my logs, I can see the following:
Packet-Type = Access-Request
Thu Jul 19 09:37:23 2007
User-Name = [EMAIL PROTECTED]
Digest
On Tue, 2007-07-24 at 11:43 +0300, FreeRadius-ML wrote:
Hi Peter,
Well, according to the RFC, the string should be:
username:realm:password and then into the md5sum.
No, the digest response is:
md5 (
concat (
md5 ( user:realm:passwd )
:07:01 PM (GMT+0200) Asia/Jerusalem
Subject: Re: rml_perl question
Ok,
I think I'm getting somewhere on this. After running wireshark and
capturing the traffic,
I actually realized that the Authentication/Authorization headers consists of
a random hash
that is identified by the nonce
@lists.freeradius.org
Sent: Tuesday, July 24, 2007 2:00:33 PM (GMT+0200) Asia/Jerusalem
Subject: Re: rml_perl question
On Tue, 2007-07-24 at 11:43 +0300, FreeRadius-ML wrote:
Hi Peter,
Well, according to the RFC, the string should be:
username:realm:password and then into the md5sum.
No, the digest response
:11 PM (GMT+0200) Asia/Jerusalem
Subject: Re: rml_perl question
On Tue, 2007-07-24 at 13:54 +0300, FreeRadius-ML wrote:
Ok,
It would appear that I'm a little silly, due to the way FreeRadius logs the
information
on the console. I've been debugging the information that I get, and I can see
FreeRadius-ML wrote:
Now, my question is this, what is the formula to calculate the digest from
all of the
above information? I've tried backtracking the code, but ended up with a
slight headache.
If anyone has information, that would be highly appreciated.
I don't understand.
The
FreeRadius-ML wrote:
Now I understand you better, and I agree, that would constitute a much more
scalable method. In that case, I return to my previous question, do you have a
working rlm_perl script that does this, as I would like to see how this works.
If you can write Perl code to get
PROTECTED], FreeRadius users mailing list
freeradius-users@lists.freeradius.org
Sent: Tuesday, July 24, 2007 5:47:36 PM (GMT+0200) Asia/Jerusalem
Subject: Re: rml_perl question
FreeRadius-ML wrote:
Now I understand you better, and I agree, that would constitute a much more
scalable method
FreeRadius-ML wrote:
Yes, that was the initial idea. However, $RAD_CHECK{User-Password}, at
least according to
my log file doesn't exist:
I don't understand. Did you update the Perl script to set that? Or
are you just looking at the debug output, and expecting to see
22 matches
Mail list logo
