Re: FreeRadius and md5 hashed passwords

From: Scott Lambert (lambert_at_lambertfam.org)
Date: 09/17/03

  • Next message: Martin Jessa: "Re: FreeRadius and md5 hashed passwords" 
    Date: Tue, 16 Sep 2003 22:24:35 -0400
To: freebsd-isp <freebsd-isp@freebsd.org>

    On Wed, Sep 17, 2003 at 03:03:43AM +0200, Martin Jessa wrote:
    > Hi guys.
    >
    > I have set up freeradius with authentication agains MySQL.
    > I have poptop talking to the radius server and in that way authenticating my users.
    > The problem is I cannot make the radius server read md5 encrypted passwords, only plain text.
    > Any idea what to do to make it read md5 passwords?
    > Example of the password table:
    >
    > table 'radcheck' :
    >
    > Cleartext (works):
    > INSERT INTO radcheck VALUES (2,'test@yazzy.org','User-Password',':=','12233445');
    >
    > MD5 (no love):
    > INSERT INTO radcheck VALUES (3,'test@yazzy.org','User-Password',':=','bc8bf6f2fd343cab9d387d5dcc777be3');

    I think you are missing the salt.

    This is an MD5 cryptpassword of your example cleartext password:

    $1$HuVWpRMf$dmUeqUO15b9HGbDmmki6W. 

    -- 
Scott Lambert                    KC5MLE                       Unix SysAdmin
lambert@lambertfam.org      
_______________________________________________
freebsd-isp@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
  • Next message: Martin Jessa: "Re: FreeRadius and md5 hashed passwords"

    Relevant Pages

    • FreeRadius and md5 hashed passwords
      ... I have set up freeradius with authentication agains MySQL. ... The problem is I cannot make the radius server read md5 encrypted passwords, ...
      (freebsd-isp)
    • Re: secure login form
      ... For my point of view I'm thinking of using md5 passwords in db. ... If you want the avoid the man-in-the-middle eavesdropping on you: Then you need https, ... If you are afraid the username/password you store in your database is hacked somehow, then it can make sense to store them with an md5 hash, which is one-way encryption indeed. ... (You can propagate the sessionid from http to https via a form, and let the receiving script use that sessionid for its https session. ...
      (comp.lang.php)
    • Re: secure login form
      ... For my point of view I'm thinking of using md5 passwords in db. ... If you want the avoid the man-in-the-middle eavesdropping on you: Then you need https, ... If you are afraid the username/password you store in your database is hacked somehow, then it can make sense to store them with an md5 hash, which is one-way encryption indeed. ... (You can propagate the sessionid from http to https via a form, and let the receiving script use that sessionid for its https session. ...
      (comp.lang.php)
    • Re: Time-to-crack MD5 passwords
      ... ]>]> customer of, regarding the length of passwords. ... ]> The md5 passwords do not use just md5. ... ]> use an arbitrary length string-- you are not limited to 8 characters. ...
      (comp.security.misc)
    • Re: Current thoughts on system partitioning
      ... > Just to use my specific example, I've built a server with two 160 GB ... In my experience, SuSE by default installs DES encryption for passwords, ... you can switch the SuSE to MD5 ...
      (comp.os.linux.setup)