Password encoding/decoding

Wichert Akkerman wichert at wiggy.net
Mon Aug 3 12:12:45 UTC 2009


I am wondering if something goes wrong in the password handling. I know 
something goes wrong on my end in the UAM<->Chilli communication which 
mangles passwords: if I sent ABCDEFGHIJKLMNOPQRSTUVWXYZ as password
chilli decodes that to ABCDEFGHIJKLMNOPK<lots of binary>. But things go 
wrong on when that is sent to RADIUS as well. Here is the FreeRadius log 
output for the same request:

rad_recv: Access-Request packet from host 127.0.0.1 port 56008, id=2, 
length=269
	Vendor-14559-Attr-8 = 0x312e302e3134
	User-Name = "wichert"
	User-Password = "U\004j,"
	NAS-IP-Address = 10.1.0.1
	Service-Type = Login-User
	Framed-IP-Address = 10.1.0.3
	Calling-Station-Id = "00-0C-29-27-79-83"
	Called-Station-Id = "00-0C-29-6C-0F-92"
	NAS-Identifier = "nas01"
	Acct-Session-Id = "4a76d33900000002"
	NAS-Port-Type = Wireless-802.11
	NAS-Port = 2
	WISPr-Location-ID = "isocc=NL,cc=31,ac=020,network=Attingo,KLM_Lounge"
	WISPr-Location-Name = "KLM_Lounge"
	WISPr-Logoff-URL = "http://10.1.0.1:3990/logoff"
	Message-Authenticator = 0x4d6f776979e5711baf9ae428338e9bf7
Login incorrect (rlm_pap: CLEAR TEXT password check failed): 
[wichert/U\004j,] (from client localhost port 2 cli 00-0C-29-27-79-83)
   WARNING: Unprintable characters in the password. 	  Double-check the 
shared secret on the server and the NAS!

which shows that my bad password has become even more corrupted.

Wichert.



More information about the Chilli mailing list