Re: Linksys WRT54G - DD-WRT - Wireless Auth

2007-02-15 Thread Richard Hamilton-Frost
Thanks Alan,

What I'll probably have a go at will be attempting to authenticate it
against Samba if possible, not looked into how it works yet, but I'm
hopeful. :)

R

On 15/02/07, Alan DeKok [EMAIL PROTECTED] wrote:
 Richard Hamilton-Frost wrote:
  What I want:
 
  To be able to authenticate wireless users via the /etc/passwd and
  /etc/shadow files. I've setup the WRT54GL to talk to the Radius
  server, this all seems fine and dandy. The WRT54GL is using WPA TKIP,
  it has the option of WPA AES too, and WPA AES+TKIP, neither seem to
  work.. here is the output I get when trying to authenticate a user:

  ...
  rlm_eap_md5: Issuing Challenge

   http://deployingradius.com/documents/protocols/compatibility.html

   Passwords in /etc/shadow are hashed via the crypt method, or one
 similar to that.  It is impossible to do EAP-MD5 and authenticate users
 via passwords in /etc/shadow.

   If you're going to use EAP, you MUST have the clear-text password for
 the user.

   Alan DeKok.
 --
   http://deployingradius.com   - The web site of the book
   http://deployingradius.com/blog/ - The blog
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Linksys WRT54G - DD-WRT - Wireless Auth

2007-02-14 Thread Alan DeKok
Richard Hamilton-Frost wrote:
 What I want:
 
 To be able to authenticate wireless users via the /etc/passwd and
 /etc/shadow files. I've setup the WRT54GL to talk to the Radius
 server, this all seems fine and dandy. The WRT54GL is using WPA TKIP,
 it has the option of WPA AES too, and WPA AES+TKIP, neither seem to
 work.. here is the output I get when trying to authenticate a user:

 ...
 rlm_eap_md5: Issuing Challenge

  http://deployingradius.com/documents/protocols/compatibility.html

  Passwords in /etc/shadow are hashed via the crypt method, or one
similar to that.  It is impossible to do EAP-MD5 and authenticate users
via passwords in /etc/shadow.

  If you're going to use EAP, you MUST have the clear-text password for
the user.

  Alan DeKok.
--
  http://deployingradius.com   - The web site of the book
  http://deployingradius.com/blog/ - The blog
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html