No password at /var/log/radiusd.log

2001-11-19 Thread Hans van Kilsdonk

Hi everyone,

I have setup Freeradius on my Cobalt RAQ4r webserver using the following
command line:

/usr/sbin/radiusd -z -f -A -y -p portnr -d /usr/local/etc/raddb

As you can see I included the -z option so I can see which password the
users use to login. When I look at my log file at /var/log/radiusd.log, I
only can see the following:

Mon Nov 19 20:42:23 2001: Auth: Login OK: [username1/] (from nas
123.456.789.000/S3074)
Mon Nov 19 20:44:07 2001: Auth: Login OK: [username2/] (from nas
123.456.789.000/S1032)
Mon Nov 19 20:44:39 2001: Auth: Login OK: [username3/] (from nas
123.456.789.000/S280)
Mon Nov 19 20:52:28 2001: Auth: Login OK: [username4/] (from nas
123.456.789.000/S2307)
Mon Nov 19 20:54:45 2001: Auth: Login OK: [username5/] (from nas
123.456.789.000/S2564)

So I only see the username, but not the password (what should be after the
/). At the moment I have configured the radius to allow everyone, so there
is not any authentification.

Can someone help me? I want to know the password they use to login. I
_tried_ to search the archives, but couldn't find any answers.

Thanks in advance.

- Hans :-)





- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: No password at /var/log/radiusd.log

2001-11-19 Thread Chris Parker

At 08:56 PM 11/19/2001 +0100, Hans van Kilsdonk wrote:
Hi everyone,

I have setup Freeradius on my Cobalt RAQ4r webserver using the following
command line:

/usr/sbin/radiusd -z -f -A -y -p portnr -d /usr/local/etc/raddb

As you can see I included the -z option so I can see which password the
users use to login. When I look at my log file at /var/log/radiusd.log, I
only can see the following:

Try changing the 'raddb/radiusd.conf' file to allow displaying passwords.

Apart from the command line, the config file must also be set properly.

-Chris
--
\\\|||///  \  Chris Parker-Manager, Development Engineering
\ ~   ~ /   \   WX *is* Wireless!\   [EMAIL PROTECTED]
| @   @ |\   http://www.starnetwx.net \  (847) 963-0116
oOo---(_)---oOo--\--
   \ Without C we would have 'obol', 'basi', and 'pasal'


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: No password at /var/log/radiusd.log

2001-11-19 Thread Hans van Kilsdonk

Hi Chris,

First of all, thanks for the fast reply :-)

 Try changing the 'raddb/radiusd.conf' file to allow displaying passwords.

 Apart from the command line, the config file must also be set properly.

Well, I checked the config file, and I think everything is ok. The following
values are set:

-

#  Log authentication requests to the log file.
#
#  allowed values: {no, yes}
log_auth = yes

#  Log passwords with the authentication requests.
#  log_auth_badpass  - logs password if it's rejected
#  log_auth_goodpass - logs password if it's correct
#
#  allowed values: {no, yes}
log_auth_badpass = yes
log_auth_goodpass = yes

-

Do I set more variables to let the password show up into my logfiles?

Kind regards,

- Hans




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: No password at /var/log/radiusd.log

2001-11-19 Thread Chris Parker

At 09:24 PM 11/19/2001 +0100, Hans van Kilsdonk wrote:
Well, I checked the config file, and I think everything is ok. The following
values are set:

-

#  Log authentication requests to the log file.
#
#  allowed values: {no, yes}
log_auth = yes

#  Log passwords with the authentication requests.
#  log_auth_badpass  - logs password if it's rejected
#  log_auth_goodpass - logs password if it's correct
#
#  allowed values: {no, yes}
log_auth_badpass = yes
log_auth_goodpass = yes

-

Do I set more variables to let the password show up into my logfiles?

Nope, that should do it.  Hmmm, it may be that the password is not
printed to the logfiles, only to the terminal in debug mode.

I'd look at the code in 'src/main/auth.c' and try playing with that.  From
what I can tell it should be working.

You are running the latest version?  Also, what do you see if you run the
server in debug mode?

-Chris
--
\\\|||///  \  Chris Parker-Manager, Development Engineering
\ ~   ~ /   \   WX *is* Wireless!\   [EMAIL PROTECTED]
| @   @ |\   http://www.starnetwx.net \  (847) 963-0116
oOo---(_)---oOo--\--
   \ Without C we would have 'obol', 'basi', and 'pasal'


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: No password at /var/log/radiusd.log

2001-11-19 Thread Andreas Faust

On Mon, Nov 19, 2001 at 09:24:11PM +0100, Hans van Kilsdonk wrote:
 Hi Chris,
 
 First of all, thanks for the fast reply :-)
 
  Try changing the 'raddb/radiusd.conf' file to allow displaying passwords.
 
  Apart from the command line, the config file must also be set properly.
 
 Well, I checked the config file, and I think everything is ok. The following
 values are set:
 
 -
 
 #  Log authentication requests to the log file.
 #
 #  allowed values: {no, yes}
 log_auth = yes
 
 #  Log passwords with the authentication requests.
 #  log_auth_badpass  - logs password if it's rejected
 #  log_auth_goodpass - logs password if it's correct
 #
 #  allowed values: {no, yes}
 log_auth_badpass = yes
 log_auth_goodpass = yes
 
 -
 
 Do I set more variables to let the password show up into my logfiles?
No.
If you use CHAP Passwords, they will not be displayed. only PAP Passwords will be 
printed.

cheers
Andreas Faust

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html