Bug 54409 - Service Specific Password (Radius): Configure Radius to use Service Specific Password
Service Specific Password (Radius): Configure Radius to use Service Specific ...
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Radius
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-1-errata
Assigned To: Julia Bremer
Erik Damrose
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2022-02-02 09:21 CET by Julia Bremer
Modified: 2022-03-23 14:14 CET (History)
0 users

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Julia Bremer univentionstaff 2022-02-02 09:21:39 CET
We want Radius to work with the new user's attribute
Add a UCR variable, e.g. radius/use-service-passwords

Adjust radius integration. If UCRV is set to true, ONLY look at a user's univentionRadiusPassword attribute. If set to false, ONLY use the original NT hashes

Document the UCRV and its implications (that only one way will work and that there is no fallback)

Test the auth: univentionRadiusPassword now works, the original password does not work
Test the auth: If no password is set, the auth just fails
Comment 1 Julia Bremer univentionstaff 2022-03-22 13:35:47 CET
1b48c17af8 Bug #54409 - Service Specific Password (Radius): Configure Radius to use Service Specific Password


We've modified the radius package to use a service specific password if configured. 
This can be activated by using the ucr variable 
radius/use-service-specific-password
Comment 2 Erik Damrose univentionstaff 2022-03-22 14:42:59 CET
OK: git 1b48c17af8
OK: test 11_service_specific_password.py
OK: univention-radius 7.0.1-8A~5.0.0.202203152214
OK: yaml

Verified