empty password

[stambazzi andrea]

Hi

I have to autenticate my ppp users with free radius without checking password
but only the username. I have no idea how to do this because i don't know any
settings in configure file or in database table which can enable this mode.

Anybody can help me?!

By Stamba

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Evren Yurtesen]

well I dont know if this would work but you could try regex in password so
it might accept any password like * as the password.

Post by stambazzi andrea
Hi
I have to autenticate my ppp users with free radius without checking password
but only the username. I have no idea how to do this because i don't know any
settings in configure file or in database table which can enable this mode.
Anybody can help me?!
By Stamba
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[stambazzi andrea]

Post by Evren Yurtesen
well I dont know if this would work but you could try regex in password so
it might accept any password like * as the password.

I have enabled regexp in radius.conf with parameters

regular_expression == yes
extended expression = yes

and after i have put in radchek table a record like the following

| Username | Attribute | Value | op |
+----------+---------------+----------+----+
| stamba | User-Password | ^[\w\W]$ | =~ |


but login with user "stamba" failed, have i missed anythig?!
where was i wrong?!


thank you

By
Stamba


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Evren Yurtesen]

I think a simple ^.* or .* would match all the characters int he password.
I use := operator for the passwords but...
Well I do not know if the regulare expressions in freeradius work for
passwords. It was just a guess that it might work.
You should check out the output of radiusd -sxx or -sxxx and see whats
going wrong exactly.

Evren

Post by stambazzi andrea

Post by Evren Yurtesen
well I dont know if this would work but you could try regex in password so
it might accept any password like * as the password.

I have enabled regexp in radius.conf with parameters
regular_expression == yes
extended expression = yes
and after i have put in radchek table a record like the following
| Username | Attribute | Value | op |
+----------+---------------+----------+----+
| stamba | User-Password | ^[\w\W]$ | =~ |
but login with user "stamba" failed, have i missed anythig?!
where was i wrong?!
thank you
By
Stamba
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[stambazzi andrea]

Post by Evren Yurtesen
I think a simple ^.* or .* would match all the characters int he password.

I have tried this one too ... but nothing ... it failed again

Post by Evren Yurtesen
I use := operator for the passwords but...
Well I do not know if the regulare expressions in freeradius work for
passwords. It was just a guess that it might work.

In "man 5 users" is written :

Attribute =~ Expression
As a check item, it matches if the request contains an
attribute which matches the given regular expression.
This operator may
only be applied to string attributes.
Not allowed as a reply item.

is there a mistake?!

Post by Evren Yurtesen
You should check out the output of radiusd -sxx or -sxxx and see whats
going wrong exactly.

ok i'm ready to try... tell me good luck :-)

Stamba



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Evren Yurtesen]

I dont think so. I didnt use regular expressions before so... :)
I think you are right at using =~ I didnt check what it was...

But is your problem really matching any password or is it ok if the
password is empty? You can maybe try to have an empty password.

Also did you try radius -sxxx and what do you see as the problem?

I think if you are using CHAP the regular expressions wouldnt work.
Perhaps only with PAP (and maybe something else but I only am experienced
in PAP and CHAP)

Evren

Post by stambazzi andrea

Post by Evren Yurtesen
I think a simple ^.* or .* would match all the characters int he password.

I have tried this one too ... but nothing ... it failed again

Post by Evren Yurtesen
I use := operator for the passwords but...
Well I do not know if the regulare expressions in freeradius work for
passwords. It was just a guess that it might work.

Attribute =~ Expression
As a check item, it matches if the request contains an
attribute which matches the given regular expression.
This operator may
only be applied to string attributes.
Not allowed as a reply item.
is there a mistake?!

Post by Evren Yurtesen
You should check out the output of radiusd -sxx or -sxxx and see whats
going wrong exactly.

ok i'm ready to try... tell me good luck :-)
Stamba
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Alan DeKok]

Post by stambazzi andrea
I have to autenticate my ppp users with free radius without checking
password but only the username. I have no idea how to do this
because i don't know any settings in configure file or in database
table which can enable this mode.

The FAQ has an example of rejecting everyone via the 'Reject'
authentication type. You can accept everying with the 'Accept'
authentication type. e.g.

user Auth-Type := Accept


Will cause the user to be accepted.

Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[stambazzi andrea]

Yes .... it's good ... run right
Thank you very mutch.

Post by Alan DeKok
The FAQ has an example of rejecting everyone via the 'Reject'
authentication type. You can accept everying with the 'Accept'
authentication type. e.g.
user Auth-Type := Accept
Will cause the user to be accepted.
Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html