users file: =~ and User-Password

2006-03-24 Thread Stefan Winter
Hi, I'm trying to understand what exactly happens in the users file when processing User-Password. The situation I'm seeing here is in a rather complex scenario, and the results are not quite what I would expect. In short, when a MS-CHAP'ed request comes in and users contains a check User

Re: users file: =~ and User-Password

2006-03-24 Thread Phil Mayers
Stefan Winter wrote: Hi, I'm trying to understand what exactly happens in the users file when processing User-Password. The situation I'm seeing here is in a rather complex scenario, and the results are not quite what I would expect. In short, when a MS-CHAP'ed request comes in and users

Re: users file: =~ and User-Password

2006-03-24 Thread Stefan Winter
That will not work. How is the mschap module supposed to know which plaintext password to perform the challenge/response with? In fact, since the value is a regexp, how is it supposed to even know what the alternative values are (you cannot in general reverse a regexp to get the matching

Re: users file: =~ and User-Password

2006-03-24 Thread Phil Mayers
Stefan Winter wrote: I don't expect it to do that. This line in the users file is supposed to work only for services that use PAP, and can actually do a string comparison on User-Password. What I would like to do when these people use VPN is that users doesn't match, and the VPN-only

Re: users file and User-Password..

2005-05-30 Thread Rok Papez
Hello Alan. Dne petek 27 maj 2005 18:43 je Alan DeKok napisal(a): Rok Papez [EMAIL PROTECTED] wrote: I beg to differ... the users file is one of the things in freeradius that are not confusing :). It appears to be simple, but your question about User-Password shows the limitations

Re: users file and User-Password..

2005-05-27 Thread Rok Papez
Hello Alan. Dne etrtek 26 maj 2005 18:25 je Alan DeKok napisal(a): Anthony Hinsinger [EMAIL PROTECTED] wrote: Can you explain me what is the problem if you use := operator and for example a CHAP authentication ? because i imagine the CHAP module use the password found in the config items

Re: users file and User-Password..

2005-05-27 Thread Alan DeKok
Rok Papez [EMAIL PROTECTED] wrote: I beg to differ... the users file is one of the things in freeradius that are not confusing :). It appears to be simple, but your question about User-Password shows the limitations problems of the users file. What is supposed to replace the users file ?

users file and User-Password..

2005-05-26 Thread Anthony Hinsinger
Hello, i've a technical question about the users file and how it deals with User-Password. In a lot of examples (including freeradius provided) we can see this kind of things : userUser-Password == pass A-Reply-Attribut = value Another-Reply-Attribut = another_value my

Re: users file and User-Password..

2005-05-26 Thread Alan DeKok
Anthony Hinsinger [EMAIL PROTECTED] wrote: user User-Password == pass A-Reply-Attribut = value Another-Reply-Attribut = another_value my question is, why == operator ?? Because the users file is trying to do two different things with that line. For me the goal of the

Re: users file and User-Password..

2005-05-26 Thread Anthony Hinsinger
Can you explain me what is the problem if you use := operator and for example a CHAP authentication ? because i imagine the CHAP module use the password found in the config items list ... ??? no ?? Thanks Anthony Le jeudi 26 mai 2005 à 11:49 -0400, Alan DeKok a écrit : Anthony Hinsinger

Re: users file and User-Password..

2005-05-26 Thread Alan DeKok
Anthony Hinsinger [EMAIL PROTECTED] wrote: Can you explain me what is the problem if you use := operator and for example a CHAP authentication ? because i imagine the CHAP module use the password found in the config items list ... ??? no ?? If it works, use it. But the users file will be