Hello Ray -
On Fri, 30 Jun 2000, Raymond Brighenti wrote:
> Hi,
>
> Just got Radiator running with MySQL, all seemed to be going alright until
> I notice that it was accepting any password given as long as a valid
> username was used.
>
> I've dropped it back to using the passwd file but I'm bluffed as to what is
> happening. Also I've noticed that nothing is getting written to the
> password logfile so I'm assuming it must be something in my config which
> I've listed below as well as some of the log file at Trace 4
>
> AuthSelect select ENCRYPTEDPASSWORD from SUBSCRIBERS where USERNAME='%n'
> EncryptedPassword
> # AuthColumnDef 0, User-Password, check
> AuthColumnDef 1, CHECKATTR, check
> AuthColumnDef 2, REPLYATTR, reply
>
The above won't check the password at all, as you have discovered.
I would have expected the following:
AuthSelect select ENCRYPTEDPASSWORD from SUBSCRIBERS where USERNAME='%n'
AuthColumnDef 0, Encrypted-Password, check
AuthColumnDef 1, CHECKATTR, check
AuthColumnDef 2, REPLYATTR, reply
Check section 6.25.7 in the Radiator 2.16.1 reference manual.
regards
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
