Comments (8)
Here is my Python implementation for EAP-MSCHAPv2 only, maybe it can help : https://github.com/mneitsabes/RADIUS-EAP-MSCHAPv2-Python-client
from pyrad.
Can the following URL be used to jumpstart EAP support
https://w1.fi/cgit/hostap/plain/tests/hwsim/test_eap_proto.py
from pyrad.
I'm going to face the same problem, Auth-type CHAP means to let the sysadmins to read cleartext password in /var/log/freeradius/radius.log if the radius configuration have auth_goodpass and auth_badpass configured to true.
We really need to introduce PEAP o, at least MSCHAP.
CHAP is unusable in production environment.
from pyrad.
+1 for MSCHAPv2 I think it's really needed in 2019 PAP is so weak and Windows 10 cant access to set encyption if PAP is enabled only.
from pyrad.
+1 for EAP/PEAP/MSCHAP
from pyrad.
+1 for EAP/PEAP/MSCHAP :)
from pyrad.
If it helps, this is my CHAP / MS-CHAP / MS-CHAP-v2 code written in Python 2.7 and Twisted:
https://gist.github.com/adiroiban/59eb28cf767aec9535fda8ac1162401f
It uses the radius.py
library and not pyrad but I think that it can help with documenting the format of the message.
There is no EAP/PEAP tunneling there.
I hope this can help understand how the messages should be formatted.
I had a hard time reading all the PPP and RADIUS RFC to see how to format the messages ... but it was easier than reading the freeradius C code :)
I plan to migrate my code to pyrad ... but I don't know when.
I am testing it using a freeradius docker... and it's super fast after removing the delay on failure.
The gist has some freeradius configs, let me know if you need more info about the docker testing fixture.
# Remove the delay on failure.
# This is only used for testing so we don't want any delays.
sed -i 'Ns/.*reject_delay = .*/ reject_delay = 0/' /etc/raddb/radiusd.conf
from pyrad.
I tried to connect to Raidus using MS-CHAPv2 by adding MS-CHAP-Challenge and MS-CHAP2-Response to the request, but it ultimately failed.
# ...
req = srv.CreateAuthPacket(code=pyrad.packet.AccessRequest,
User_Name=username)
req.AddAttribute("MS-CHAP-Challenge", b'\x00' * 8)
req.AddAttribute("MS-CHAP2-Response", b'\x00' + struct.pack('<B', len(passwd)) + passwd.encode() + b'\x00' * 24)
# ...
from pyrad.
Related Issues (20)
- Server.py did not read file changes
- IndexError: list index out of range
- Example acct.py issues PacketError: Packet verification failed with server_async.py HOT 1
- logger error in client_async.py : TypeError: not enough arguments for format string in line 136
- New version release HOT 1
- New version release HOT 2
- Question on if the pyrad based server can do TLS handshaking over RADIUS messages HOT 1
- netaddr 0.9.0 dependency issue HOT 1
- RFE: please provide support for `netaddr` > 0.8
- how to include 'Class' in Accounting Request?
- Question about PAP in Radius HOT 1
- No listen sockets when /etc/services is not found on debian
- New Version of Pyrad HOT 2
- TypeError: unsupported operand type(s) for ^: 'int' and 'str' in packet.py
- Using pyrad => module 'select' has no attribute 'poll' in client.py ( On Windows, only sockets are supported; on Unix, all file descriptors.)
- Decryption of salt encrypted attributes (encrypt=2) is incorrect
- pyrad access accept packet error
- Bug: KeyError when handling CoA packet for 0.0.0.0 host
- Suggestion: clear DF bit in replies (IP_MTU_DISCOVER to IP_PMTUDISC_DONT)
- Imlement countermeasures against BlastRADIUS vulnerability HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pyrad.