On Thu, Aug 16, 2012 at 3:40 AM, Robert Haskins
<[email protected]> wrote:
> I get a reject, even though the
> crypt'd passwords match!

That's not how crypt works. You don't compare the crypted password.


> [pap] login attempt with password "krt444"

that is what the user sends

> [pap] Using CRYPT password "*3u.3LS/VKTOVc"

that is what FR reads from whatever backend which stores user
information (in your case, should be the unix module)

> The crypt'd password ("*3u.3LS/VKTOVc") is exactly what is in the
> /etc/shadow file.

because that's where FR reads it from, of course it's the same.

> So I am confident the shared secret is correct.

Shared secret has nothing to do with your problem.

> What am I doing wrong?

Simple. Is "krt444" the correct password? FR says it's not.

-- 
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to