Hello,
I think there is a problem with the case-sensivity of password
(freeradius-0.3) in radclient:
Lets sess the follwoing excerpt of my configuation:
########################################
a Auth-Type := Local, Password == "x"
Framed-Protocol = PPP
A Auth-Type := Local, Password == "X"
Framed-Protocol = PPP
########################################
Now I run 3 requests with radclient for the two users a (Password: a lower
case x) and A (Password: an upper case X):
################################################################
bash-2.03$ bin/radclient -x -s -d radius1 hybris:12345 auth foo
User-Name = a , Password = x
Sending Access-Request of id 98 to 145.230.107.11:21645
User-Name = "a"
Password = "\257\327 sm\033\334\000)\231zR\264^hw"
rad_recv: Access-Accept packet from host 145.230.107.11:21645, id=98,
length=32
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = A , Password = X
Sending Access-Request of id 99 to 145.230.107.11:21645
User-Name = "A"
Password = "Cn\303\365\363\314N\016\030\375nY\204\346\353\033"
rad_recv: Access-Reject packet from host 145.230.107.11:21645, id=99,
length=20
User-Name = A , Password = x
Sending Access-Request of id 100 to 145.230.107.11:21645
User-Name = "A"
Password = "\356n\231\236\tj3Y\220{\007\037(yD\256"
rad_recv: Access-Accept packet from host 145.230.107.11:21645, id=100,
length=32
Service-Type = Framed-User
Framed-Protocol = PPP
################################################################
Results:
- User "a" is accepted with its lower case password "x". (This is OK)
- User "A" is NOT accepted with its upper case password "X". (This is not
OK)
- User "A" is accepted with the lower case password "x". (This is not OK)
I would have expected, user "A" would be accepted with its upper case
password "X" but it is not.
I do not use the case conversion feature, as you see from the radius start
messages:
main: lower_user = "no"
main: lower_pass = "no"
The "funny" part ist, that radiusd is working OK. But I needed 4 hours to
find that out. If my NAS is communicating with the RADIUS, everything is OK.
Only oif I use radclient, the problem occurs. So I am pretty sure, radclient
is messing with the case of the password. Can someone with radclient
knowledge take a look at this?
> Christian
>
> --
> Vodafone Passo GmbH
> Christian Esken
> DTD - Development Telematics Distributed Architecture
> Niederkasseler Lohweg 20
> D - 40547 D�sseldorf
> Fon: +49 (0) 211 53 68 - 358
> Fax: +49 (0) 211 53 68 - 440
> mailto:[EMAIL PROTECTED]
> http://www.passo.de
>
>
---------------------------------------------------------
This Mail has been checked for Viruses
Attention: Encrypted mails can NOT be checked!
**
Diese Mail wurde auf Viren geprueft
Hinweis: Verschluesselte mails koennen NICHT auf Viren geprueft werden!
---------------------------------------------------------
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
