[RADIATOR] Password in clear text in the logfile

[Hugh Irvine]

Hello Pascal -

The trace 4 log is meant for debugging, and as such being able to see  
the password is extremely useful.

In production you should run at Trace 3 or below.

regards

Hugh


On 14 Oct 2009, at 02:32, Pascal Beauregard wrote:

> Hi,
>
> is there a way to hide the password of EAP TTLS (PAP) inner  
> authentication in the logfile when using trace level 4 ?
>
> Tue Oct 13 11:05:27 2009: DEBUG: TTLS Tunnelled Diameter Packet dump:
> Code:       UNDEF
> Identifier: UNDEF
> Authentic:  UNDEF
> Attributes:
>         User-Name = "beap1910"
>         User-Password =  
> passwordincleartext<0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
>
> Tue Oct 13 11:05:27 2009: DEBUG: EAP TTLS inner authentication  
> request for beap1910
> Tue Oct 13 11:05:27 2009: DEBUG: Handling request with Handler  
> 'TunnelledByTTLS=1'
> Tue Oct 13 11:05:27 2009: DEBUG:  Deleting session for beap1910,  
> 10.40.2.34,
> Tue Oct 13 11:05:27 2009: DEBUG: Handling with Radius::AuthGROUP:
> Tue Oct 13 11:05:27 2009: DEBUG: Handling with Radius::AuthLDAP2:
> .
> .
> .
>
>
>
> Pascal Beauregard
> Analyste en télécommunications
> Université de Sherbrooke
> (819)821-7770
> www.usherbrooke.ca
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator 
)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.