(RADIATOR) DecryptPassword CHAP-Password

[Hugh Irvine]

Hello Julio -

You cannot use CHAP in the way you describe, as it is one-way encrypted.

Your external program must have access to the plaintext password for  
the user and deal with CHAP from there.

You can see what happens with Radiator by using an AuthBy FILE clause  
with a test user and a cleartext password.

hope that helps

regards

Hugh


On 15 Mar 2007, at 10:24, Julio Cesar Pinto wrote:

> Hi Guys,
>
> We're using a AuthBy EXTERNAL in order to authenticate with a external
> program develop in Java, with our NAS that use User-Password attribute
> we don't have any problem, but other NAS send us CHAP-Password and we
> couldn't sent to the external program the password in plain text.  
> We use
> the special character %P that means "The decrypted User-Password from
> the current request" but with the cases CHAP-Password doesn't work, we
> try to use DecryptPassword but don't work too.
>
> We appreciate if you can help us to solve it.
>
> Greetings,
>
> JC.
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.