Thanks Alan! Yet again. :)

I am now seeing the Chap-Challenge in my authorization script.  However,
I'm still having problems.  This is probably stupidity on my side, but is
there some sort of pre-processing that I need to do before I can use the
Chap-Password and Chap-Challenge?  I have included below what the
pass/challenge look like when I view them from the script in my old
XTRadius setup, and then what they look like from FreeRadius.  In XTRadius
the chap password comparison works, but in freeradius it does not.

XTRadius
--------
chap-pass: 0194A67E47CFE4FA7BC26B427A57E3E040
chap-chal: 01FEF1A0C5EC1B6CB50A0ACBB219C43B

FreeRadius
----------
chap-pass: \014\207A\264E\\\014:\356\272LK\235\214\305\232\t
chap-chal: 0xf3bf7364e5d583e556a1eff10fa46f03

Any suggestions?  Thanks!

Darren Nay - [EMAIL PROTECTED]


On Sat, 12 Jan 2002 [EMAIL PROTECTED] wrote:

> Darren Nay <[EMAIL PROTECTED]> wrote:
> > The problem is that I since I am doing the authentication via an external
> > script I do the password comparison in the external script as well, and
> > without a CHAP Challenge phrase then I am unable to compare CHAP
> > passwords.
>
>   Sorry, there was a patch that I thought was added in, but wasn't
> there.
>
>   Grab the current version from CVS.  The CHAP-Challenge attribute is
> now added by the 'hints' module.
>
> > Alan, you mentioned that you can do CHAP authentication in the server
> > core.  Is this possible in my scenario?
>
>   Not right now, sorry.
>
>
>   Hmm... now that I think of it, there was a patch I had for Cistron a
> while ago, which allowed you to do:
>
> DEFAULT          Auth-Type := Local, Password = `/exec/program ...`
>
>   That may come in handy here, too.
>
>   Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to