> From: Olmo Gonzalez
> Sent: Thursday, 2 October 2003 11:02 PM
> I currently have a MSSQL based user database which I need radius to use as
> user accounts database. From what I've read in the doc and the list, this
> should be straightforward using UnixODBC snd the FreeTDS driver.
> However, I understand that freeradius expects to find the username and
> password stored as plaintext in the database and this is where the problem
> arises: usernames and passwords are stored in the database using a 'private'
> ("home-made") encryption algorithm. Therefore, it is my intention to
> introduce a small mod to the freeradius source so that the password is
> retrieved from the database as is (encrypted) and is then transformed to
> plaintext before handling control to the rest of the freeradius code. My
> question is: What would the best place to introduce this small mod be?
rlm_exec in the authorize section, after your sql call? That should save
on modifications to the server, and your encryption algorithm can be chanaged
without rebuildig the whole server. It'll also save time when upgrading the
server.
--
Paul "TBBle" Hampson
Bubblesworth Pty Ltd (ABN: 51 095 284 361)
[EMAIL PROTECTED]
On a sidewalk near Portland State
University someone wrote `Trust Jesus', and
someone else wrote `But Cut the Cards'.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
