ntop / ntopng

Web-based Traffic and Security Network Traffic Monitoring
http://www.ntop.org
GNU General Public License v3.0
6.21k stars 651 forks source link

User authentication via RADIUS/PAP no longer works in ntopng #7455

Closed GrumpyOldNetworkGuy closed 1 year ago

GrumpyOldNetworkGuy commented 1 year ago

Environment:

What happened: Since an automatic update of ntopng about two weeks ago, authentication via RADIUS/PAP no longer works. The reason is that CHAP is used instead of PAP:

RADIUS Protocol Code: Access-Request (1) Packet identifier: 0xd3 (211) Length: 88 Authenticator: 53315c4c1e64bfd5d2152271bb22ce11 Attribute Value Pairs AVP: t=User-Name(1) l=5 val= Type: 1 Length: 5 User-Name: tgh AVP: t=CHAP-Challenge(60) l=32 val= Type: 60 Length: 32 CHAP-Challenge: AVP: t=CHAP-Password(3) l=19 val= Type: 3 Length: 19 CHAP-Password: CHAP Ident: 0x23 CHAP String: AVP: t=NAS-Port(5) l=6 val=0 Type: 5 Length: 6 NAS-Port: 0 AVP: t=NAS-IP-Address(4) l=6 val= Type: 4 Length: 6 NAS-IP-Address: radius-pap

MatteoBiscosi commented 1 year ago

Hi @GrumpyOldNetworkGuy i pushed a fix regarding the pap authentication, in a couple of hours a new update should be available, please update and let me know if it fixed the issue

GrumpyOldNetworkGuy commented 1 year ago

Hi @MatteoBiscosi You fixed it. Thanks.