help-gnu-radius
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-gnu-radius] User-Password character


From: Tomoyasu Maitani
Subject: Re: [Help-gnu-radius] User-Password character
Date: Fri, 19 Aug 2005 14:04:47 +0100

I am sorry for asking you many times, but I have one more question.

I could confirm that Radauth recognize the password which is included
"=", "!" and "$" characters.
But only one case, the first letter is "=" of password, is still failed.

//users file//
test    Auth-Type = Local,
                User-Password = "=test=123!"
        Service-Type = Framed-User,
                Framed-Protocol = PPP

# ./radauth -v test
Password:  <---  =test=123!
radtest: debug: client.c:247:grad_client_send0: sending Access-Request
radtest: debug: server 127.0.0.1:1645
radtest: debug: send: User-Name = (STRING) test
radtest: debug: send: NAS-IP-Address = (IPADDR) 127.0.0.1
radtest: debug: send: User-Password = (STRING) 
\165\070\001\232\155\331\214\240\211\325\130\266\270\162\347\200
radtest: debug: client.c:138:grad_client_recv: received Access-Reject
radtest: debug: radpdu.c:402:grad_decode_pdu: allocated radreq: 0x8068950
radtest: debug: radpdu.c:417:grad_decode_pdu: Access-Reject from 127.0.0.1, 
id=133, length=39
radtest: debug: recv: Reply-Message = (STRING) \015\012Access denied\015\012
Authentication failed.
Access denied

# ./radauth -v test
Password:  <---  test=123!
radtest: debug: client.c:247:grad_client_send0: sending Access-Request
radtest: debug: server 127.0.0.1:1645
radtest: debug: send: User-Name = (STRING) test
radtest: debug: send: NAS-IP-Address = (IPADDR) 127.0.0.1
radtest: debug: send: User-Password = (STRING) 
\154\071\203\172\223\210\201\240\330\104\034\372\145\371\272\376
radtest: debug: client.c:138:grad_client_recv: received Access-Accept
radtest: debug: radpdu.c:402:grad_decode_pdu: allocated radreq: 0x8068950
radtest: debug: radpdu.c:417:grad_decode_pdu: Access-Accept from 127.0.0.1, 
id=134, length=32
radtest: debug: recv: Service-Type = (INTEGER) Framed-User
radtest: debug: recv: Framed-Protocol = (INTEGER) PPP
Authentication passed.

//radius.log//
Aug 19 13:51:21 Auth.notice: (Access-Request local 133 "test"): Login incorrect 
[test/=test=123!]
Aug 19 13:52:22 Auth.notice: (Access-Request local 134 "test"): Login OK [test]

I typed password "test=123!" as a test, then it was passed. Therefore
Radius programme seems to ignore the first "=" letter of Password even
if Radtest send a password characters correctly.

Best regards,

Tomoyasu Maitani

On Fri, 19 Aug 2005 12:55:46 +0300
Sergey Poznyakoff <address@hidden> wrote:

> Hi,
> 
> > # ./radauth -v test 'test=123!'
> > assign: invalid IP address: 123!
> > Password:
> [..]
> > As the above result, "test=123!" is does not recocnized as password
> > from command line. How should I specify the password from command
> > line?
> 
> I did not think about it. The problem is that equal sign confuses
> radauth, because it understands each command line argument in form
> VAR=VALUE as a variable assignment (see
> http://www.gnu.org/software/radius/manual/html_node/radius_160.html#SEC270
> for more info on the subject).
> 
> I will fix this in the nearest release. Meanwhile, you can run radauth as
> follows:
> 
> ./radauth -v test
> 
> and enter the password when it prompts you for it.
> 
> Regards,
> Sergey
> 



****************************************************************************
The information contained in this electronic mail message, and any and
all accompanying documents, is confidential and may be legally 
privileged.  If you are not the intended recipient of this information,
any form of disclosure, distribution, copying or use of this communication
or the information in it or in any attachments is strictly prohibited
and may be unlawful. If you received this information in error, please
notify the sender immediately and delete it and destroy any copies of it.
Messages sent via the Internet may be subject to delays and/or unauthorized
alteration. Neither KDDI Europe Limited nor any of its affiliates shall
be held liable for the contents of this message.
****************************************************************************




reply via email to

[Prev in Thread] Current Thread [Next in Thread]