Re: rlm_pap and support of SCRYPT hash ?

Alan DeKok via Freeradius-Users <[email protected]> Fri, 18 Jul 2025 07:59:29 -0400

Newsgroups	gmane.comp.freeradius.user
Message-ID	<[email protected]>

On Jul 16, 2025, at 10:44 AM, Marc Fradin <[email protected]> wrote:
> recently, for security reasons,  we change the hash of passwd in our ldap directory from {SSHA} to {CRYPT}*SCRYPT *but EAP/TTLS/PAP no longer works
> 
> Indeed, man rlm_pap talks about crypt but not *scrypt*

  It uses "crypt" as a short form for any crypt-style storage.  In order to do its work, the module uses the crypt() function which supplied by the local OS.

> I installed a new test VM host with FreeRADIUS Version 3.2.5 on "Ubuntu 24.04.2 LTS"
> It works fine now but I don't know if it's due to the new version of freeradius or the updated crypt libraries for exemple ?

  Updating the local OS allows it to support more variants of crypt encoding.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html