Re: [Help-gnu-radius] Password on a MySQL Server

[Mario - Firewalls]

Hi,

I am using gnu-radius-0.96 source code, compiled with --with-mysql 
--with-clients.
Using default table structure.
And i note that the field password on table passwd is not varchar(34) binary, 
it's just char(64) maybe it's a point.
My auth_query is default too, like yours.

What I think is, the crypt that I am using on mysql is not the same...
I am testing with radauth -v server:secret user pass

The crypts that I used are:
 encrypt from mysql.
 crypt from php.
 MD5 from php.
 MD5 from php with base64_encode or base64_decode.
 Crypt from php  with base64_encode/decode.
 crypt from php with encrypt of mysql.
 DES from mysql.

Don't what do to anymore...

Thanks


---------------------------------
M?rio Frederico Le?o Balistieri
Firewalls Security Corporation
www.firewalls.com.br
address@hidden


Key fingerprint = C2BA B98D EE25 BEAF E0EF  4AD6 4B75 DDD2 1D74 97C7

On 26 Feb 2003, Edward Rudd wrote:

> I'm using the stock 0.96.4 source code with mysql support compiled in. I
> have no patches applied. I am using mysql-3.23.54a. on a RedHat 7.3 box.
> And using the query
> SELECT user_passwd FROM user_name WHERE user_name='%u'
> for auth_query
>
> and this table structure.
>
> user_name varchar(32) binary
> user_passwd varchar(34) binary
>
> And I used the encrypt function in Mysql AND the crypt function in php
> version 4.2.2.
>
> There must be something else wrong with your configuration.
> Could you post some more of your configuration options (in /etc/raddb)
> and your compilation options so we can see where the problem is.
>
> On Wed, 2003-02-26 at 10:41, Mario - Firewalls wrote:
> > As I said, I tried with ENCRYPT function of mysql, and with crypt functin 
> > of PHP and a lot of other ones.
> > And all I get is:
> > Auth.notice: Login Incorrect [user/pass nvalid chars] ...
> > Like the password shown in the notice is not in cleartext...
> >
> > Maybe the version I am using.... or a PATCH I did not aplied... or the 
> > auth_query needs to be modified..???
> >
> > Thanks...
> >
> >
> > Firewalls Security Corporation
> > www.firewalls.com.br
> > address@hidden
> >
> >
> > Key fingerprint = C2BA B98D EE25 BEAF E0EF  4AD6 4B75 DDD2 1D74 97C7
> >
> > On 26 Feb 2003, Edward Rudd wrote:
> >
> > > The passwords are crypted..
> > > so basically do this..
> > > INSERT INTO user_name (username,password) VALUES
> > > ('myuser',CRYPT('mypass'))
> > > or you can use the php crypt function
> > >
> > > $crypted_pass = crypt('mypass');
> > > and then insert that contents of $crypted_pass into the Database.
> > > make sure your password field is long enough though.. Mine is 34
> > > characters.
> > >
> > > On Wed, 2003-02-26 at 09:58, Mario - Firewalls wrote:
> > > > Hi there,
> > > > I'm trying to use GNU-Radius with MySQL, so I realized that the 
> > > > passwords stored on a mysql server must be encrypted. Does it realy 
> > > > need to be encrypted? could it be in cleartext/plaintext ?
> > > > If not, how I encrypt the password before storing it ?
> > > > I tryied to encrypt with md5sum(from slackware) with MD5,ENCRYPT and 
> > > > DES functions of mysql, with functions of 
> > > > PHP(crypt,md5,base64_encode/decode) and I did not get it working !
> > > >
> > > > PS: Using md5(php) and after using the function base64_encode I get a 
> > > > supposed working string, but MySQL does not accept it on a varchar 
> > > > field, cuz they're invalid chars.
> > > >
> > > > Please need help.
> > > > Thanks a lot!
> > > >
> > > > Mario Leao.
> > > > Firewalls Security Corporation
> > > > www.firewalls.com.br
> > > >
> > > > Key fingerprint = C2BA B98D EE25 BEAF E0EF  4AD6 4B75 DDD2 1D74 97C7
> > > >
> > > >
> > > >
> > > > _______________________________________________
> > > > Help-gnu-radius mailing list
> > > > address@hidden
> > > > http://mail.gnu.org/mailman/listinfo/help-gnu-radius
> > > --
> > > Edward Rudd <address@hidden>
> > >
> >
> >
> >
> > _______________________________________________
> > Help-gnu-radius mailing list
> > address@hidden
> > http://mail.gnu.org/mailman/listinfo/help-gnu-radius
> --
> Edward Rudd <address@hidden>
>