Encrypting an Access Reply Attribute

2003-12-10 Thread Tom Stoll 
Hello FreeRADIUS Users,

I am using FreeRADIUS Version 0.9.2.

Does anyone have an example that demonstrates how to encrypt an
individual access reply attribute?

I was going to encrypt the attribute using a custom Exec-Program-Wait
function but I could not figure out how to to obtain and pass the NAS'
shared secret and the authenticator to the function.  I was hoping to
find a macro substitution but didn't.

Thank you,

Tom Stoll
-- 


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Encrypting an Access Reply Attribute

2003-12-10 Thread Alan DeKok 
Tom Stoll [EMAIL PROTECTED] wrote:
 Does anyone have an example that demonstrates how to encrypt an
 individual access reply attribute?

  You shouldn't have to.  See the dictionary files, and look for
encrypt=.  If you're going to use the standard User-Password
encryption, then create a dictionary file entry for your attribure
like:

ATTRIBUTE   My-Magic-Foo250 string  encrypt=1

  And the server will automatically encrypt it when sending, and
decrypt it when receiving.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Encrypting an Access Reply Attribute

2003-12-10 Thread Tom Stoll 
On Wed, 2003-12-10 at 12:26, Alan DeKok wrote:
 Tom Stoll [EMAIL PROTECTED] wrote:
  Does anyone have an example that demonstrates how to encrypt an
  individual access reply attribute?
 
   You shouldn't have to.  See the dictionary files, and look for
 encrypt=.  If you're going to use the standard User-Password
 encryption, then create a dictionary file entry for your attribure
 like:
 
 ATTRIBUTE My-Magic-Foo250 string  encrypt=1
 
   And the server will automatically encrypt it when sending, and
 decrypt it when receiving.
 
   Alan DeKok.

Thank you, that is exactly what I was looking for, but missed.

Regards,

Tom Stoll



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html