[RADIATOR] Chap challenge in AuthBy EXTERNAL

Heikki Vatiainen hvn at open.com.au
Thu Feb 16 17:12:50 CST 2012


On 02/16/2012 11:32 AM, Mark Green wrote:

> I could use PreAuthHook to read the authenticator and add it as a
> custom attribute.
> But how can I read the packet info I need from the hook?

Try ${$_[0]}->authenticator. That should give you the authenticator from
the current request.

Thanks!
Heikki


> Please somebody help me.
> 
> 2012/2/15 Heikki Vatiainen <hvn at open.com.au>
>>
>> On 02/14/2012 05:34 PM, Mark Green wrote:
>>
>>> # The challenge is sent by the client in CHAP-Challenge.
>>> # If that is not set, the challenge is in the authenticator
>>> $challenge = $p->getAttrByNum($Radius::Radius::CHAP_CHALLENGE);
>>> $challenge = $p->authenticator unless defined $challenge;
>>>
>>> What is authenticator? How can I read this value in AuthBy EXTERNAL?
>>
>> It's not an attribute, but part of fixed RADIUS packet header.
>>
>> http://tools.ietf.org/html/rfc2865#section-3
>>
>> This also means you can not access it from AuthBy EXTERNAL. You could
>> consider using AuthBy INTERNAL and e.g., RequestHook or AuthHook instead.
>>
>> Heikki
>>
>> --
>> Heikki Vatiainen <hvn at open.com.au>
>>
>> Radiator: the most portable, flexible and configurable RADIUS server
>> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
>> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
>> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
>> DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
>> NetWare etc.


-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.


More information about the radiator mailing list