Problem of DECserver900TM about CHAP password.

From: Mr. Nopchai Tangtritham <nung_at_ranger.tu.ac.th>
Date: Mon, 23 Mar 1998 08:10:39 +0700 (GMT+0700)

Hi managers,

        Does anyone have experiences RADIUS(in dunix) with DECserver900TM?
Here is the story.

        I found a problem that DECserver900TM cannot use Radius (Merit or
Livingston).
        The processes flow are.

        PC (Windows 95) --> connect via modem --> DECserver900TM

        DECserver900TM --> send CHAP or PAP password --> Radius Server

        Radius Server --> send back password not match --> DECserver900TM

Radius Server is Merit or Livingston Radius Server. Tried both.
              Compile on system Alpha Server Unix OSF/1 V4.0B Enhance
              Security.
DECserver900TM has firmware V2.0 and use NetRider Manager to setup True
              PPP and radius access.

Problem are.
1. DECserver900TM send only CHAP or PAP password to Radius Server, can
send in other method like plain text password (No encrypt)?

2. Radius Server (merit or livingston) cannot decrypt CHAP or PAP password
to plain text password, so Radius Server cannot compare password with UNIX
password in OSF/1 V4.0B, do you have a source code of decrypt password
from CHAP or PAP to plain text password?

3. Radius Server (merit or livingston) found CHAP password they used MD5
calculate plain text password (Unix encrypt password) to CHAP password and
compare in pattern ofCHAP password. I saw a source code, I can change it
but I don't know how to reverse MD5 pattern.

4. Do you have another idea about DECserver900TM with merit or livingston
Radius Server on OSF/1 V4.0B?

Thank in advance for your help.
Nung
Received on Mon Mar 23 1998 - 02:09:41 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:37 NZDT