(RADIATOR) Encrypted Password and Rad V2.18
Hisham Al-Shiha
hshiha at medu.net.sa
Sat May 27 08:42:43 CDT 2006
Dear all,
I have this small problem with my radiator 2.18. I know it's an old
version :) but does it support encrypted password authentication?. I have
iPlanet Directory Server 5.1 and I created user with unix encryption {crypt}
but radiator couldn't't authenticate the user. I tried to use option1 and
option2 as follows:
Option1:
<AuthBy LDAP2>
AddToReply Service-Type = Framed-User,Framed-Protocol =
PPP,Idle-Timeout = 1200
AuthDN uid=abc, o=xxx
AuthPassword xxx
BaseDN o=xxx
FailureBackoffTime 30
Host 1.2.3.4
Identifier xyz
PasswordAttr userPassword
Port 389
UsernameAttr uid
</AuthBy>
Result:
Sat May 27 16:22:33 2006: DEBUG: LDAP got result for uid=hshiha2,o=xxx
Sat May 27 16:22:33 2006: DEBUG: LDAP got userPassword: {crypt}QGQB./X7xTVOM
Sat May 27 16:22:33 2006: DEBUG: Radius::AuthLDAP2 looks for match with
hshiha2
Sat May 27 16:22:33 2006: DEBUG: Radius::AuthLDAP2 REJECT: Bad Password
Sat May 27 16:22:33 2006: DEBUG: Connecting to 1.2.3.4, port 389
Sat May 27 16:22:33 2006: DEBUG: No entries for DEFAULT found in LDAP
database
Sat May 27 16:22:33 2006: INFO: Access rejected for hshiha2: Bad Password
Option2:
<AuthBy LDAP2>
AddToReply Service-Type = Framed-User,Framed-Protocol =
PPP,Idle-Timeout = 1200
AuthDN uid=abc, o=xxx
AuthPassword xxx
BaseDN o=xxx
FailureBackoffTime 30
Host 1.2.3.4
Identifier xyz
### just changed this
EncryptedPasswordAttr userPassword
Port 389
UsernameAttr uid
</AuthBy>
Result:
Sat May 27 16:24:06 2006: DEBUG: LDAP got result for uid=hshiha2,o=xxx
Sat May 27 16:24:06 2006: DEBUG: LDAP got userPassword: {crypt}QGQB./X7xTVOM
Sat May 27 16:24:06 2006: DEBUG: Radius::AuthLDAP2 looks for match with
hshiha2
Sat May 27 16:24:06 2006: WARNING: Cant use encrypted passwords with CHAP
Sat May 27 16:24:06 2006: DEBUG: Radius::AuthLDAP2 REJECT: Bad Encrypted
password
Sat May 27 16:24:06 2006: DEBUG: Connecting to 1.2.3.4, port 389
Sat May 27 16:24:06 2006: DEBUG: No entries for DEFAULT found in LDAP
database
Sat May 27 16:24:06 2006: INFO: Access rejected for hshiha2: Bad Encrypted
password
So, I think radiator 2.18 doesn't support encrypted authentication?
Is this correct?
Best Regards,
Hesham Alshehah
Systems Engineer
MeduNet
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list