Hello Cortney -
On Thu, 13 Apr 2000, Cortney Thompson wrote:
> Hi all I am back,
>
> In my employers never ending battle to make things more complicated than
> ever I have ran into another problem.
>
> I am running two HP-UX 10.2 machines with Navis Radius on them. I have
> them setup to just proxy requests on to a different radiator server. This
> is where I run into problems. I always get a "Reject:Bad Password"
> error. This happens even on accounts I know are good. So I did a little
> looking around and added some extra Debug information in the code. I found
> that the proxy servers are saying the password is a clear text password
> when in fact it is encrypted. If I point the Max TNT (Authenticator)
> directly to the Radiator server authentication works great, but when I put
> the Navis Raius porxy server in the middle something goes wrong. Has
> anyone seen this before? I realize that this is a Navis problem, but I
> thought I would bounce this off the list before I start in with Lucent support.
>
> Here is what I got out of the Debug I did on the AuthGeneric.pm file.
>
> --------------------------------------------
> sub checkAttributes
> elsif ( $check_name eq 'Password'
> || $check_name eq 'User-Password')
>
> {
> if (!$p->check_plaintext_password($value, $username))
> {
> $self->log($main::LOG_DEBUG,
> "Username: $username");
> $self->log($main::LOG_DEBUG,
> "Value: $value");
>
> return ($main::REJECT, "Bad Password");
> ---------------------------------------------------
> I get the following in (Trace 4)
>
> Wed Apr 12 01:00:05 2000: DEBUG: Radius::AuthSQL looks for match with ***
> ---------------------------
> Wed Apr 12 01:00:05 2000: DEBUG: Username: Radius::Radius=HASH(0x1155290)
> Wed Apr 12 01:00:05 2000: DEBUG: Value: pattyn -"This is the correct Sql
> password.
> ---------------------------
> Wed Apr 12 01:00:05 2000: DEBUG: Radius::AuthSQL REJECT: Bad Password
>
>
This looks to me like a problem with the shared secret between the Navis and
Radiator. Note that we have also had a number of other reports of problems with
Navis and there are apparently some patches available that fix at least some of
the problems.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
