At 11:54 PM 11/9/2001 +0200, you wrote:
>On Fri, 9 Nov 2001, Nathan Miller wrote:
>
> >
> >
> > I am happy to report my previous issues dealing with the external scripts
> > are all fixed and working. I am coming from an XT-Radius background, and
> > migrating many of the same scripts over which I am trying to get to work
> > with FreeRadius. Nearly everything is successful except 1 item. Chap
> > authentication. We are using perl for the auth script, and attached is a
> > copy of the CHAP function to see if it matches. The problem I am
> having is
> > $digest is never eq substr($chap_password,1). I have confirmed that both
> > $ENV{"CHAP_PASSWORD"} and $ENV{"CHAP_CHALLENGE"} do have data.
> >
> > Any assistance is apprecated. This exact (well, XT uses different ENV
> > names, but otherwise exact) function works perfect in XT Radius, so I am
> > assuming there must be something just slightly different about how
> > Freeradius handles the chap password and challenge. Also, if anyone has a
> > pre-written script which handles CHAP auth, that would also be useful.
>
>freeradius is capable of handling CHAP authentication. It can handle it both
>internally and through a module (rlm_chap).
I truly appreciate the response; however, I am unfamiliar with rlm_chap. I
have searched:
- Google Extensively
- CPAN Perl Modules
- Through all source of freeradius
- Through all documentation of freeradius
- Through the CHAP RFC
And I don't find any reference in any to module rlm_chap. I haven't
tested; however, am confident that Freeradius will handle chap requests
easily for users in the users file with plaintext password. The issue I am
having is with an external script being called by Exec-Program-Wait in the
users file though. Gathering the Chap-Password and Chap-Challenge in
passed vars, it never seems to add up and give the correct response.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
