search

wizard-merlin / ocserv-radius-mysql

Dockerized ocserv, use freeradius for authentication, authorization and accounting, and MySQL as backing database, works out of the box.
GNU General Public License v3.0
8 stars 3 forks source link

use perl module for authentication so that we can use a stronger pass… #1

Closed wizard-merlin closed 6 years ago

wizard-merlin commented 6 years ago

…word hasing function PBKDF2. Unfortunately, the sql module only recognize AVP names like "Crypt-Password", "MD5-Password", etc., so we must reuse one of the existing AVP names in the attribute field of radcheck table. I choose "Cleartext-Password" because otherwise freeradius will preprocess the value. This custom authentication perl script only supports PBKDF2.