Debug show cleartext password

2013-09-11 Thread Marco Aresu
Hi All i am getting a problem on Freeradius installed on CentOS. When i set the service Radiusd in debug mode and send an access request (default type PAP) through Radtest the debug show the password in cleartext. Is there an option to do not show the fiedl User-Password in cleartext? Many

Re: Debug show cleartext password

2013-09-11 Thread Arran Cudbard-Bell
On 11 Sep 2013, at 07:52, Marco Aresu marcoar...@gmail.com wrote: Hi All i am getting a problem on Freeradius installed on CentOS. When i set the service Radiusd in debug mode and send an access request (default type PAP) through Radtest the debug show the password in cleartext. Is

Re: Debug show cleartext password

2013-09-11 Thread A . L . M . Buxey
Hi, i am getting a problem on Freeradius installed on CentOS. When i set the service Radiusd in debug mode and send an access request (default type PAP) through Radtest the debug show the password in cleartext. Is there an option to do not show the fiedl User-Password in

Re: Debug show cleartext password

2013-09-11 Thread A . L . M . Buxey
Hi, no. I guess we should do something with it to make it FIPS compliant but it's not a big priority. You're welcome to submit a patch. ..you mean sniffable by NSA? it passes that requirement already ;-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Debug show cleartext password

2013-09-11 Thread Arran Cudbard-Bell
On 11 Sep 2013, at 08:43, a.l.m.bu...@lboro.ac.uk wrote: Hi, i am getting a problem on Freeradius installed on CentOS. When i set the service Radiusd in debug mode and send an access request (default type PAP) through Radtest the debug show the password in cleartext. Is there an

radclient error

2013-09-11 Thread Mehdi Ravanbakhsh
Hi All I have this Error when using radclient: radclient: Nothing to send. radclient:: Expected end of line or comma I do not know what is means ? (radclient is run by PlPerl script in my postgresql database engine) Best regards. - List info/subscribe/unsubscribe? See

Re: radclient error

2013-09-11 Thread Arran Cudbard-Bell
On 11 Sep 2013, at 11:03, Mehdi Ravanbakhsh baba...@gmail.com wrote: Hi All I have this Error when using radclient: radclient: Nothing to send. radclient:: Expected end of line or comma I do not know what is means ? It means you've not specified any input pairs, use the -f option,

RE: free radius setup

2013-09-11 Thread stefan.paetow
The alternative is getting your users to install something like SecureW2 (which I believe requires a license now), and using EAP-TTLS- PAP which submits the users password in plaintext, or I believe more recent flavours of Windows support EAP-TTLS too. If I remember correctly, when using

Re: radclient error

2013-09-11 Thread Mehdi Ravanbakhsh
thanks Arran It is solved Best regards. On Wed, Sep 11, 2013 at 3:03 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 11 Sep 2013, at 11:03, Mehdi Ravanbakhsh baba...@gmail.com wrote: Hi All I have this Error when using radclient: radclient: Nothing to send.

Re: free radius setup

2013-09-11 Thread Phil Mayers
On 11/09/13 12:05, stefan.pae...@diamond.ac.uk wrote: The alternative is getting your users to install something like SecureW2 (which I believe requires a license now), and using EAP-TTLS- PAP which submits the users password in plaintext, or I believe more recent flavours of Windows support

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Nikolaos Milas
On 31/8/2013 5:57 μμ, Nikolaos Milas wrote: I'll look into DHCP... Looking at the sites-available/dhcp example setup (on v2.2.0) I see that the DHCP code is not production-ready. Based on user feedback and on your involvement with next FreeRadius release(s) development, do you expect the

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Arran Cudbard-Bell
On 11 Sep 2013, at 14:49, Nikolaos Milas nmi...@noa.gr wrote: On 31/8/2013 5:57 μμ, Nikolaos Milas wrote: I'll look into DHCP... Looking at the sites-available/dhcp example setup (on v2.2.0) I see that the DHCP code is not production-ready. Based on user feedback and on your

RE: free radius setup

2013-09-11 Thread stefan.paetow
That's because EAP-TTLS/PAP doesn't use EAP on the inner tunnel. Just PAP. So default_eap_type is irrelevant. You support EAP-TTLS/PAP by ensuring PAP is working in the inner tunnel - by populating a cleartext or hashed password and calling the pap module in the authorize/authenticate

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Arran Cudbard-Bell
On 11 Sep 2013, at 15:37, Nikolaos Milas nmi...@noa.gr wrote: On 11/9/2013 5:05 μμ, Arran Cudbard-Bell wrote: Define production-ready... Production-ready DHCP Server: A DHCP Server that can be used as such in a real-life, mission-critical, organizational environment, i.e. in a network

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Nikolaos Milas
On 11/9/2013 5:05 μμ, Arran Cudbard-Bell wrote: Define production-ready... Production-ready DHCP Server: A DHCP Server that can be used as such in a real-life, mission-critical, organizational environment, i.e. in a network where clients (hosts) will only get an IP address if and only if

Re: FreeRadius DHCP against LDAP

2013-09-11 Thread Alan DeKok
Nikolaos Milas wrote: My understanding is that the term production system implies the definition above. It's just a warning. If it works for you, it works. Does the reference to code apply to the configuration file only (sites-available/dhcp) or to the DHCP FreeRadius module (as I have