Hello Deepak -
On Tue, 11 Jul 2000, Deepak Shrestha wrote:
> Hi,
> I have tried using AuthBy SYSTEM without the UseGetspnam parameter. It
> says "Bad Encrypted password" even I know I have entered the right
> password. I got this with the radpwtst utility.
>
> Tue Jul 11 12:25:05 2000: DEBUG: Handling request with Handler
> 'Realm=mos.com.np'
> Tue Jul 11 12:25:05 2000: DEBUG: Rewrote user name to deepak
> Tue Jul 11 12:25:05 2000: DEBUG: Deleting session for deepak,
> 203.63.154.1, 1234
> Tue Jul 11 12:25:05 2000: DEBUG: Handling with Radius::AuthFILE
> Tue Jul 11 12:25:05 2000: DEBUG: Radius::AuthFILE looks for match with
> deepak
> Tue Jul 11 12:25:05 2000: DEBUG: Radius::AuthFILE looks for match with
> DEFAULT
> Tue Jul 11 12:25:05 2000: DEBUG: Handling with Radius::AuthSYSTEM
> Tue Jul 11 12:25:05 2000: DEBUG: getpwnam got deepak, xbWNZioHiutHw, 3745,
> 1, , , Deepak,MC,,,A, /home/deepak, /bin/csh
> Tue Jul 11 12:25:05 2000: DEBUG: Radius::AuthSYSTEM looks for match with
> deepak
> Tue Jul 11 12:25:05 2000: DEBUG: Radius::AuthSYSTEM REJECT: Bad Encrypted
> password
> Tue Jul 11 12:25:05 2000: DEBUG: Radius::AuthFILE REJECT: Bad Encrypted
> password
> Tue Jul 11 12:25:05 2000: INFO: Access rejected for deepak: Bad Encrypted
> password
> Tue Jul 11 12:25:05 2000: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 42357 ....
> Code: Access-Reject
>
Thanks for sending the trace - it shows that you are getting the password
string back from the AuthBy SYSTEM call. However, as the password check fails I
wonder if you are trying to use CHAP authentication? If so, that will be the
problem, as you cannot do CHAP with encrypted passwords - you must use PAP.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
