Re: How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-03-17 Thread yao guoxian
Thanks,Alan. The problem seems to have been resolve. Here is anothor queston which seems unrelated to this topic.When I recompiled Freeradius,I got the following errors from the command make and make install: .. acct.c:18682:1: warning: null character(s) ignored acct.c:18682: parse error

Re: How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-03-16 Thread yao guoxian
Thanks,Alan. To create a new attribute, I did the following things. (1).I edited the file src/include/radius.h and add a line like #define PW_AES_PASSWORD 192 . (2).I also edited the file /usr/local/share/freeradius/dictionary and insert a line like ATTRIBUTE

Re: How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-03-16 Thread Alan DeKok
yao guoxian wrote: Sorry , Alan. The most recently response to the Access-request packet from radiusd -X monitor are as follows( only a segment related to the request): Look at rlm_chap for how it handles CHAP requests. You need to do something similar for your method. Alan DeKok. --

Re: How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-03-13 Thread Alan DeKok
yao guoxian wrote: Thanks,Alan. But I have a few questions. First, if I create a new attribute My-Aes-Password and include it in the Access-Requet packet, I should not include the attributes such as User-Password or Chap-Password.Is it right? Yes. The second question is

Re: How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-03-12 Thread yao guoxian
Thanks,Alan. But I have a few questions. First, if I create a new attribute My-Aes-Password and include it in the Access-Requet packet, I should not include the attributes such as User-Password or Chap-Password.Is it right? For I have read RFC 2865, and gotten the message from page 64th

Re: How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-02-03 Thread yao guoxian
Thanks, Alan. But I have lots of problems. First, what is difference between challenge-response and chap?In my opinion, challenge-response is a authentication mechanism and flow while chap is a method to hide and transport user' password. In challenge-response, the random challenge is produced by

Re: How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-02-03 Thread Alan DeKok
yao guoxian wrote: Second,suppose we have enabled the NAS(client) and Freeradius to support our specified attribute My-Aes-Password , how to write the new module to handle the attribute? See the examples the documentation. What about them is unclear? Third , how to enable Freeradius

How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-02-01 Thread yao guoxian
Hi! I have a smart card emluator which suports AES, not MD5 encryption algorithm. Is it possible to enable Freeradius to support my smart card emlulator? I have an idea as follow: First,amending client agent (NAS) daemon program to make it send chap-password which is produced with AES,

Re: How to enable Freeradius to support a smart card with AES encryption algorithm?

2007-02-01 Thread Alan DeKok
yao guoxian wrote: Hi! I have a smart card emluator which suports AES, not MD5 encryption algorithm. Is it possible to enable Freeradius to support my smart card emlulator? Edit the code. I have an idea as follow: First,amending client agent (NAS) daemon program to make it