[Help-gnu-radius] CHAP with Exec-Program-Wait

[Sergei Nesterkov]

Hello

 

I need external authorization with Exec-Program-Wait attribute and CHAP protocol. First of all I'm write test program to see what NAS send me. It only reads incoming arguments and prints them to the file. I'm using MS Win2000 Remote Access Server with RADIUS authorization for testing purposes.

Making call with

username:qq

password:qq

 

 

Here's my files:

 

#---------------- start users ------------------------------------

DEFAULT Auth-Type = Accept,
        Simultaneous-Use = 1
        Exec-Program-Wait = "/usr/home/bear/prog/radcond/auth \
        %C{User-Name:=0} \
        %C{Password:=0} \
        %C{CHAP-Challenge:=0} \
        %R{CHAP-Password:=0}",
        Framed-IP-Address = 255.255.255.254

#---------------- end users ------------------------------------

 

#---------------- start auth.c ------------------------------------

int main( int argc, char **argv )
{
FILE *fd;
int c;
  fd = fopen("/tmp/auth.log", "a");

  for(c=1;c<argc;c++)
     fprintf(fd,"[%s] ", argv[c]);
fprintf(fd,"\n");
fclose(fd);
exit(0);
}

#---------------- end auth.c ------------------------------------

 

#---------------- start auth.log ------------------------------------

[qq] [\xda] [\xb78\xc1\xdc\x92^W51\xd8z\x9e\xd7UY\xc2^A] [0]

#---------------- end auth.log ------------------------------------

 

#---------------- start radius.log ------------------------------------

Sep 11 11:41:59: [38814]: Auth.notice: Login OK: [qq/]: CLID unknown (from nas 192.168.2.204)

#---------------- end radius.log ------------------------------------

 

And so, in auth.log I see only 3 parameters (CHAP-Password is empty).

How I must calculate correct this password or not?

 

Thank you.