Date: Wed, 30 Nov 2011 16:14:31 -0800 From: Doug Hardie <bc979@lafn.org> To: Outback Dingo <outbackdingo@gmail.com> Cc: Jim Pazarena <fquest@paz.bz>, freebsd-questions@freebsd.org Subject: Re: freeradius on freebsd Message-ID: <4C32A057-A1CA-4509-B6A1-B6E947BBFF98@lafn.org> In-Reply-To: <CAKYr3zwMRf8z=nP4Zx8XrBmRc=aw-SCjbx0JPF_PDO7viqs3rQ@mail.gmail.com> References: <4ED6A6E7.4030503@paz.bz> <CAKYr3zwMRf8z=nP4Zx8XrBmRc=aw-SCjbx0JPF_PDO7viqs3rQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 30 November 2011, at 15:13, Outback Dingo wrote: > On Wed, Nov 30, 2011 at 4:57 PM, Jim Pazarena <fquest@paz.bz> wrote: >> I am having issues with freeradius being told >> system passwords are incorrect by freebsd, where I >> know they are not wrong. >>=20 >> I think it relates to freeradius submitting crypt passwords >> while freebsd defaults to MD5. >>=20 >> Has anyone encountered this issue on FreeBSD? Seems the >> freeradius newsgroup doesn't have any freebsd active >> participants. >>=20 >> Could someone suggest how to coax freeradius to submit >> MD5 encrypted passwords to the system? >=20 > in short your probably better off putting a db on the backend of > freeradius instead of > using system accounts, itll be alot easier that way and can be managed > separate from > the systems accounts I have been using freeradius with FBSD for years with the system = passwords. Works just fine. Saves you a lot of hassle and extra work = in some cases. Freeradius just passes along what it receives to the = authentication mechanism. Any encryption is done at the NAS. You may = want to run with -X and save all the output. That will show where the = problem is occurring. Even if you go with a database you have to get = the encryption in the database the same as what the NAS is doing.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4C32A057-A1CA-4509-B6A1-B6E947BBFF98>