Fw: [Help-gnu-radius] authentication problem

[Cornel Cristea]

----- Original Message -----
From: "Cornel Cristea" <address@hidden>
To: "ng wai wing" <address@hidden>
Sent: Tuesday, July 02, 2002 10:11 AM
Subject: Re: [Help-gnu-radius] authentication problem


> On 18 Jul 2001 Sergey has responded to someone else:
>
> "It is supposed that the authentication table keeps either MD5 or DES
> hashes of the user's passwords. Please make sure you don't store there
> plaintext passwords or passwords encrypted via MySQL PASSWORD()
> function."  (help-gnu-radius archive)
>
> Also use a debug on mysql query if previous sentence is not applicable .
> I've done the same test as you and everything was OK.
>
> Regards
> Cornel Cristea
>
> ----- Original Message -----
> From: "ng wai wing" <address@hidden>
> To: <address@hidden>
> Sent: Tuesday, July 02, 2002 6:18 AM
> Subject: [Help-gnu-radius] authentication problem
>
>
> > --I am sorry to ask for help again and again.
> > --I really tried my best to figure out the problem, but i fail.
> > --can anyone tell me what should be the problem??
> >
> > --I use local SQL for password without encryption.
> > DEFAULT Auth-Type = Local,
> >         Password-Location = SQL,
> >         Simultaneous-Use = 1
> >         Service-Type = Framed-User,
> >         Framed-Protocol = PPP
> >
> > --"clients" file:
> > localhost          aaa
> >
> > --when i try to authenticate....
> > address@hidden radlib]# radauth -v -slocalhost:aaa Nick debug
> > server 127.0.0.1:1645
> > send code 1 (RT_AUTHENTICATION_REQUEST)
> >       send: User-Name = Nick
> >       send: Password = debug
> >       send: NAS-Port-Id = 0
> > radtest: warning: Received invalid reply digest from server
> > recv code 3 (RT_AUTHENTICATION_REJECT)
> >       recv: Reply-Message = \015\012Access denied\015\012
> > expect 2
> > got    3
> > FAIL
> >
> > --Here is my "radius.log" :
> >
> > Jul 02 10:59:05: Main.debug: radiusd.c:1297:rad_spawn_child: started
> handler at
> > pid 10635
> > Jul 02 10:59:05: Auth.debug: auth.c:753:rad_authenticate: auth: Nick
> > @ul 02 10:59:05: Auth.debug: auth.c:258:rad_check_password:
> radreq->request=??
> >
> > Jul 02 10:59:05: Auth.debug: auth.c:262:rad_check_password: decrypt the
> password
> > 8\l 02 10:59:05: Auth.debug: auth.c:266:rad_check_password: auth_item=??
> >
> > Jul 02 10:59:05: Auth.debug: auth.c:1297:req_decrypt_password:
> > req->vector=Vj5k}[<8?]???1
> > `      2, req->secret=aaa
> >
> > 8\l 02 10:59:05: Auth.debug: auth.c:268:rad_check_password:
> > userpass=p±au????i,?x, auth_item=??
> > Jul 02 10:59:05: Auth.debug: auth.c:309:rad_check_password: auth_type=0,
> > userpass=p±au????i,?x, name=N
> > ick, password=debug
> > Jul 02 10:59:05: Auth.debug: auth.c:351:rad_check_password:   auth:
Local
> > Jul 02 10:59:05: Auth.debug: auth.c:953:sfn_validate: 1 -> 17
> > Jul 02 10:59:05: Auth.debug: auth.c:983:sfn_validate: 17 -> 17
> > Jul 02 10:59:05: Auth.notice: Login incorrect: [Nick/p±au????i,?x]:
CLID
> unknown
> > (from nas local)
> > Jul 02 10:59:05: Auth.debug: auth.c:1267:sfn_reject: REJECT: Nick
> > Jul 02 10:59:05: Main.debug: radiusd.c:1325:rad_child_cleanup: child
10635
> exited: 0
> >
> > --Does it means that i can't decrypt the password transmitted??
> > --How to solve??
> > --THX~~~
> >
> > _______________________________________________
> > Help-gnu-radius mailing list
> > address@hidden
> > http://mail.gnu.org/mailman/listinfo/help-gnu-radius
> >
>