<!DOCTYPE html>
<html>
<head>
<title></title>
<style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style>
</head>
<body><div>Hi.<br></div>
<div><br></div>
<div>Thanks for your reply. 'NT-Password' isn't working with Strongswan though radtest is checking it just fine:<br></div>
<div><br></div>
<div><br></div>
<div># smbencrypt mypass<br></div>
<div>LM Hash NT Hash<br></div>
<div>-------------------------------- --------------------------------<br></div>
<div>92315C8B485693A7AAD3B435B51404EE E0C32CDA6F6ECC163F442D002BBA3DAF<br></div>
<div><br></div>
<div><br></div>
<div># INSERT INTO radcheck (username, attribute, op, VALUE) VALUES ('mylogin', 'NT-Password', ':=', 'E0C32CDA6F6ECC163F442D002BBA3DAF');</div>
<div><br></div>
<div><br></div>
<div># radtest mylogin mypass my.radius.server 10 mysecret<br></div>
<div>Sending Access-Request of id 237 to x.x.x.x port 1812<br></div>
<div> User-Name = "mylogin"</div>
<div> User-Password = "mypass"</div>
<div> NAS-IP-Address = x.x.x.x</div>
<div> NAS-Port = 10<br></div>
<div> Message-Authenticator = 0x00000000000000000000000000000000<br></div>
<div>rad_recv: Access-Accept packet from host x.x.x.x port 1812, id=237, length=20<br></div>
<div><br></div>
<div>Do I need to make any changes on the radius or Strongswan side to make them work with NT-Password?</div>
<div><br></div>
<div>Thanks & Regards,<br></div>
<div>Ron<br></div>
<div><br></div>
<div><br></div>
<div>----- Original message -----<br></div>
<div>From: Giuseppe De Marco <<a href="mailto:giuseppe.demarco@unical.it">giuseppe.demarco@unical.it</a>><br></div>
<div>To: RA <<a href="mailto:ss17@fea.st">ss17@fea.st</a>><br></div>
<div>Cc: <a href="mailto:users@lists.strongswan.org">users@lists.strongswan.org</a><br></div>
<div>Subject: Re: [strongSwan] Strongswan + Radius + MySQL + Hashed Passwords: Possible?<br></div>
<div>Date: Tue, 9 Jan 2018 15:46:04 +0100<br></div>
<div><br></div>
<div dir="ltr"><div><div>Hi RA,<br></div>
<div>Yes you can, I use NT-Password instead.<br></div>
</div>
<div>I get this working on LDAP and Freeradius <br></div>
</div>
<div><div><br></div>
<div defang_data-gmailquote="yes"><div>2018-01-09 14:07 GMT+01:00 RA <span dir="ltr"><<a href="mailto:ss17@fea.st">ss17@fea.st</a>></span>:<br></div>
<blockquote defang_data-gmailquote="yes" style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204, 204, 204);padding-left:1ex;"><div>Hi.<br></div>
<div> <br></div>
<div> I have been able to follow the guides and tutorials online and successfully setup a Strongswan IKEv2 server which authenticates with a Freeradius server with MySQL back-end. Everywhere I saw instructions like these only:<br></div>
<div> <br></div>
<div> INSERT INTO radcheck (username, attribute, op, VALUE) VALUES ('test', 'Cleartext-Password', ':=', 'pass123');<br></div>
<div> <br></div>
<div> Now this works just fine but I don't want to store plain text passwords in database and would prefer the "VALUE" column to be hashed in some way. But being new to this, I just don't know how & would be really glad if someone can provide pointers. Not sure whether its even possible or not.<br></div>
<div> <br></div>
<div> Thanks in advance.<br></div>
<div> <br></div>
<div> Regards.<br></div>
<div> Ron<br></div>
</blockquote></div>
</div>
<div><br></div>
</body>
</html>