Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix EAP-MD5 support #13

Closed
sebschrader opened this issue Oct 26, 2015 · 1 comment
Closed

Fix EAP-MD5 support #13

sebschrader opened this issue Oct 26, 2015 · 1 comment
Labels
bug
Milestone
0.4

Comments

@sebschrader
Copy link
Member

There is no RADIUS MAC authentication standard, so different vendors implement it slightly different. See here for a good overview.

Hades works with PAP and CHAP based RADIUS MAC Authentication implementation. Juniper for example uses EAP-MD5 for example. EAP-MD5 has been enabled in freeradius, but it does not cooperate well with the MAC canonicalization feature. The user name in the encapsulated EAP message (in the Identity field of the EAP message) will not be canonicalized.
@sebschrader sebschrader changed the title Verify that EAP-MD5 is supported Verify that EAP-MD5 support works Oct 26, 2015
@sebschrader sebschrader added this to the 0.4 milestone May 26, 2016
@sebschrader sebschrader changed the title Verify that EAP-MD5 support works Fix EAP-MD5 support May 19, 2017
@sebschrader sebschrader modified the milestones: 0.3, 0.4 May 19, 2017
@fgrsnau fgrsnau modified the milestones: 0.3, 0.4 May 20, 2017
@sebschrader
Copy link
Member Author

The unit test still fails, but it works in practice.

See #80

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
0.4
Development

No branches or pull requests
2 participants
@sebschrader @fgrsnau