I have setup SER to authenticate via FreeRADIUS with MSSQL DB. The problem is that the user's password is stored as cleartext in the database. I'd like to know is there a way to make such setup using hashed password (just MD5 or HA1)? In module auth_db, there is a mod parameter 'calculate_ha1' being set to 0 can be used for similiar purpose. But there is no such option for auth_radius. Maybe this is about how to configure FreeRADIUS, but I couldn't dig anything up from FreeRADIUS mailing list archive either.
Hi Cheng,
I'm not a RADIUS expert, but AFAIK only textplain passwords are supported by RADIUS.
regards, Bogdan
Cheng Zhang wrote:
I have setup SER to authenticate via FreeRADIUS with MSSQL DB. The problem is that the user's password is stored as cleartext in the database. I'd like to know is there a way to make such setup using hashed password (just MD5 or HA1)? In module auth_db, there is a mod parameter 'calculate_ha1' being set to 0 can be used for similiar purpose. But there is no such option for auth_radius. Maybe this is about how to configure FreeRADIUS, but I couldn't dig anything up from FreeRADIUS mailing list archive either.
Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users
Fortunately Philippe Sultan on freeradius-users list has a patch to solve my problem.
Philippe's reply is attached below: ------ Forwarded Message From: Philippe Sultan philippe.sultan@gmail.com Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: Wed, 12 Oct 2005 09:50:35 +0200 To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: Question on FreeRADIUS digest authentication with SIP proxy
Hi, Chen.
There is ongoing discussion on this topic :
http://lists.freeradius.org/pipermail/freeradius-users/2005-October/047606.h...
You might also want to check this, for information related to digest authentication with RADIUS and LDAP :
http://www-rocq.inria.fr/who/Philippe.Sultan/Asterisk/asterisk_sip_external_...
Bye,
Philippe ------ End of Forwarded Message
I tested Philippe's patch and it works for me. :-) For people using Gentoo, I created this enhancement bug ( http://bugs.gentoo.org/show_bug.cgi?id=109003) to help out a bit.
-- Cheng
On 10/12/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
Hi Cheng,
I'm not a RADIUS expert, but AFAIK only textplain passwords are supported by RADIUS.
regards, Bogdan
Hi Cheng,
if this patch solved your problem, can you please summit a short description of the problem and its solution on the RADIUS wiki? http://openser.org/dokuwiki/doku.php?id=radius
thanks and regards, bogdan
Cheng Zhang wrote:
Fortunately Philippe Sultan on freeradius-users list has a patch to solve my problem.
Philippe's reply is attached below: ------ Forwarded Message From: Philippe Sultan philippe.sultan@gmail.com Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: Wed, 12 Oct 2005 09:50:35 +0200 To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: Question on FreeRADIUS digest authentication with SIP proxy
Hi, Chen.
There is ongoing discussion on this topic :
http://lists.freeradius.org/pipermail/freeradius-users/2005-October/047606.h...
You might also want to check this, for information related to digest authentication with RADIUS and LDAP :
http://www-rocq.inria.fr/who/Philippe.Sultan/Asterisk/asterisk_sip_external_...
Bye,
Philippe ------ End of Forwarded Message
I tested Philippe's patch and it works for me. :-) For people using Gentoo, I created this enhancement bug ( http://bugs.gentoo.org/show_bug.cgi?id=109003) to help out a bit.
-- Cheng
On 10/12/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
Hi Cheng,
I'm not a RADIUS expert, but AFAIK only textplain passwords are supported by RADIUS.
regards, Bogdan
Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users
Sure, that's a good way to organize knowledge.
On 10/14/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
Hi Cheng,
if this patch solved your problem, can you please summit a short description of the problem and its solution on the RADIUS wiki? http://openser.org/dokuwiki/doku.php?id=radius
thanks and regards, bogdan
Cheng Zhang wrote:
Fortunately Philippe Sultan on freeradius-users list has a patch to solve my problem.
Philippe's reply is attached below: ------ Forwarded Message From: Philippe Sultan philippe.sultan@gmail.com Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: Wed, 12 Oct 2005 09:50:35 +0200 To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: Question on FreeRADIUS digest authentication with SIP proxy
Hi, Chen.
There is ongoing discussion on this topic :
http://lists.freeradius.org/pipermail/freeradius-users/2005-October/047606.h...
You might also want to check this, for information related to digest authentication with RADIUS and LDAP :
http://www-rocq.inria.fr/who/Philippe.Sultan/Asterisk/asterisk_sip_external_...
Bye,
Philippe ------ End of Forwarded Message
I tested Philippe's patch and it works for me. :-) For people using Gentoo, I created this enhancement bug ( http://bugs.gentoo.org/show_bug.cgi?id=109003) to help out a bit.
-- Cheng
On 10/12/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
Hi Cheng,
I'm not a RADIUS expert, but AFAIK only textplain passwords are supported by RADIUS.
regards, Bogdan
Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users