Discussion:
configuration of freeradius using rest.
Malik Najmus Siraj
2018-11-11 08:50:28 UTC
Permalink
Hello,

I have configured freeradius v3.0.18 and successfully authenticate using pap, eap MSCHAP. Here i am using custom mysql proc calls. It is working fine. Now, i am using rlm_rest module (https://github.com/fgsants/REST-API-FreeRADIUS) and authenticate user if user name a and password is present in access request. Now once i move to eap mschapv2, now things are not working. because once auth type eap is selected (from received request) i want to call rest api (as in case of sql). Even if i disable the eap from authorize and forcefully select rest as auth type then receive error (You set 'Auth-Type = REST' for a request that does not contain a User-Password attribute!) i think this is genuine. Can any body help me. From my point of view i need to call rest api after i extract a password from mschap (dont know how to do it)

Regards
Siraj
-
List info/subscribe/unsubscribe? See http://www.freeradiu
Alan DeKok
2018-11-11 12:41:17 UTC
Permalink
Post by Malik Najmus Siraj
I have configured freeradius v3.0.18 and successfully authenticate using pap, eap MSCHAP. Here i am using custom mysql proc calls. It is working fine. Now, i am using rlm_rest module (https://github.com/fgsants/REST-API-FreeRADIUS) and authenticate user if user name a and password is present in access request. Now once i move to eap mschapv2, now things are not working. because once auth type eap is selected (from received request) i want to call rest api (as in case of sql). Even if i disable the eap from authorize and forcefully select rest as auth type then receive error (You set 'Auth-Type = REST' for a request that does not contain a User-Password attribute!) i think this is genuine. Can any body help me. From my point of view i need to call rest api after i extract a password from mschap (dont know how to do it)
It's impossible to extract the password from MS-CHAP.

You MUST supply the password to FreeRADIUS, and let FreeRADIUS do the authentication.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/li
Loading...