Hello -

On Wed, 10 May 2000, [EMAIL PROTECTED] wrote:
> The %{User-Password} is giving an encrypted version of the actual password
> typed by the user.
> Is there another variable containing the actual password typed by the RAS
> user ?
> If not, how can I decrypt the User-Password variable.
> 

I think you will have to write a PreAuthHook to decode the password and store
it in a pseudo-attribute in the packet for later use by your AuthBy SQL. There
are some example hooks in the patches area that will help you:

        http://www.open.com.au/radiator/downloads/patches-2.15/hooks.txt

You will need to use the "decode_password" routine in Radius.pm. Note that this
will only work with PAP requests from your NAS(s) as it is impossible to
decrypt CHAP passwords.

hth

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to