> -----Original Message-----
> From: [EMAIL PROTECTED]
> Sent: Wed, 12 Dec 2007 16:20:51 -0500
> To: [EMAIL PROTECTED]
> Subject: Re: login_radius possible changes.
>
> In message <[EMAIL PROTECTED]>
>       so spake Brad Arrington (bradla):
>
>> Would it be possible to change login_radius.c actually raddauth.c so
>> that:
>>
>> 1. The admin can change what port login_radius uses, such as the
>> old datametrics port. It is currently hard coded to radius(1812).
>
> I have no objection to this part, though it cam be done a bit more
> simply.
>

Thank you, I would welcome a simpler solution.

>> 2. Make it so it does not try an empty password 2 times before it kicks
>> back
>> a
>> prompt asking for a password.
>
> I'm not at all sure about this.  I would have to test this using
> challenge/response.
>

Here is a sample of the tcpdump I get.

[1] + Running              tcpdump -i fxp0 dst host srv-aaa01.nojava.net
16:22:31.417176 d19216811.nojava.net.6984 > srv-aaa01.nojava.net.datametrics:
Axs? id:27 [41] Name = brada, Pass = [], NAS-IP = 192.168.1.1, NAS-Pt = 12393
16:22:36.418985 d19216811.nojava.net.6984 > srv-aaa01.nojava.net.datametrics:
Axs? id:27 [41] Name = brada, Pass = [], NAS-IP = 192.168.1.1, NAS-Pt = 12393
16:23:01.029570 d19216811.nojava.net.1594 > srv-aaa01.nojava.net.datametrics:
Axs? id:42 [57] Name = brada, Pass = [a91912z981a1z9c49da13ga1z1b1297], NAS-IP
= 192.168.1.1, NAS-Pt = 0

The user only gets 3 tries before the account gets locked.

This is why I must change the way login_radius(in this case raddauth.c) uses
the
variable passwd.

>  - todd

-Brad

____________________________________________________________
FREE ONLINE PHOTOSHARING - Share your photos online with your friends and
family!
Visit http://www.inbox.com/photosharing to find out more!

Reply via email to