rlm_digest(5) FreeRADIUS Module rlm_digest(5)NAMErlm_digest - FreeRADIUS Module
DESCRIPTION
The rlm_digest module authenticates RADIUS Access-Request packets that
contain Cisco SIP digest authentication attributes. The module should
be listed in the authorize and authenticate sections of radiusd.conf.
CONFIGURATION
The digest module requires no additional configuration items. When it
is being used to authenticate requests, however, it does require access
to the clear-text password for the user. Hashed passwords are not
acceptable, and will not work.
EXAMPLES
Add the following lines to the top of your 'raddb/users' file:
#---
test Auth-Type := Digest, User-Password = "test"
Reply-Message = "Hello, test with digest"
#---
Once the server has been started (debugging mode is recommended), use
'radclient to send the following packet to the server:
$ radclient -f digest localhost auth testing123
Where 'digest' is a file containing:
User-Name = "test",
Digest-Response = "631d6d73147add2f9e437f59bbc3aeb7",
Digest-Realm = "testrealm",
Digest-Nonce = "1234abcd",
Digest-Method = "INVITE",
Digest-URI = "sip:5555551212@example.com",
Digest-Algorithm = "MD5",
Digest-User-Name = "test",
Message-Authenticator = ""
You should see the authentication succeed.
SECTIONS
authorize, authenticate
FILES
/etc/raddb/radiusd.conf, draft-sterman-aaa-sip-00.txt
AUTHOR
Alan DeKok <aland@ox.org>
31 March 2005 rlm_digest(5)
