Pls help: authentication fail on x86_64 Linux

[S.T. Wong]

Hi all,

I was running Cistron Radius 1.6.6 on RedHat 8.0 (i386) for years
without problem.   Recently I try to migrate the server to new hardware
running CentOS 4.4 (x86_64) with Cistron Radius 1.6.8.  Authentication
from all radius clients except local host failed.  After some debugging,
found that the user password sent from remote radius clients (I used
radclient and Perl module Authen::Radius) can't be decrypted correctly
on the new machine.
However, authentication works if I use executable compiled on the RedHat
8 i386 machine and run it on the new x86_64 hardware with the same
configuration files.    I wonder if the case relates to the md5 code.

I searched the faq and doc but have no idea about the cause of problem.
Would anyone advice if I've anything missed?

Thank you very much.
ST Wong
-
List info/subscribe/unsubscribe? See http://www.radius.cistron.nl/list/

[Miquel van Smoorenburg]

In article <3035.137.189.29.184.1158637571.squirrel@...>,
S.T. Wong <st@...> wrote:

>Hi all,
>
>I was running Cistron Radius 1.6.6 on RedHat 8.0 (i386) for years
>without problem.   Recently I try to migrate the server to new hardware
>running CentOS 4.4 (x86_64) with Cistron Radius 1.6.8.  Authentication
>from all radius clients except local host failed.  After some debugging,
>found that the user password sent from remote radius clients (I used
>radclient and Perl module Authen::Radius) can't be decrypted correctly
>on the new machine.
>However, authentication works if I use executable compiled on the RedHat
>8 i386 machine and run it on the new x86_64 hardware with the same
>configuration files.    I wonder if the case relates to the md5 code.
>
>I searched the faq and doc but have no idea about the cause of problem.
>Would anyone advice if I've anything missed?

I think you're the first person to run it on a 64-bit machine..
the code may have some 32/64 bit problems, or some library may have.

Does Auth-Type = Local, Password = "bla" work ? Is PAP broken,
or CHAP, or both ? That should give you some clues as to where
to look for the breakage.

Mike.

-
List info/subscribe/unsubscribe? See http://www.radius.cistron.nl/list/

[S.T. Wong]

Hi,

I tried both Auth-Type=Local and Auth-Type=Pam.  Same result obtained in
both cases.   I'm trying to test by compiling Radius 1.6.8 on x86_64 into
32bit executable. Fyi also.

Thanks a lot.
/ST

> In article <3035.137.189.29.184.1158637571.squirrel@...>,
> S.T. Wong <st@...> wrote:
>>Hi all,
>>
>>I was running Cistron Radius 1.6.6 on RedHat 8.0 (i386) for years
>>without problem.   Recently I try to migrate the server to new hardware
>>running CentOS 4.4 (x86_64) with Cistron Radius 1.6.8.  Authentication
>>from all radius clients except local host failed.  After some debugging,
>>found that the user password sent from remote radius clients (I used
>>radclient and Perl module Authen::Radius) can't be decrypted correctly
>>on the new machine.
>>However, authentication works if I use executable compiled on the RedHat
>>8 i386 machine and run it on the new x86_64 hardware with the same
>>configuration files.    I wonder if the case relates to the md5 code.
>>
>>I searched the faq and doc but have no idea about the cause of problem.
>>Would anyone advice if I've anything missed?
>
> I think you're the first person to run it on a 64-bit machine..
> the code may have some 32/64 bit problems, or some library may have.
>
> Does Auth-Type = Local, Password = "bla" work ? Is PAP broken,
> or CHAP, or both ? That should give you some clues as to where
> to look for the breakage.
>
> Mike.
>
> -
> List info/subscribe/unsubscribe? See http://www.radius.cistron.nl/list/
>

-
List info/subscribe/unsubscribe? See http://www.radius.cistron.nl/list/