Bug 48128

Description Michael Grandjean 2018-11-09 14:19:52 CET

This looks like the same problem as Bug #38785 but for ucs-school-radius-802.1x:

Using certain passwords causes a Traceback in "ucs-school-ntlm-auth" and thus prevents users from using the WLAN via RADIUS.

root@schule01ucs:~# univention-app info
UCS: 4.3-2 errata291
Installed: cups=2.2.1 dhcp-server=12.0 samba4=4.7 squid=3.5 ucsschool=4.3 v5
Upgradable:

ucs-school-radius-802.1x -> 7.0.0-8A~4.3.0.201804111426


1. Create a student (e.g. using the UCS@school "Benutzer (Schulen)" wizard) with a certain password
2. Stop freeradius.service on the schoolserver and start it in debug mode: "freeradius -X"
3. Check RADIUS/MSCHAP authentication on the school server via:
$ radtest -t mschap $USERNAME "$PASSWORD" localhost 0 testing123
4. Check the debug output of "freeradius -X" - it should show this Traceback:

> Traceback (most recent call last):
>   File "/usr/bin/ucs-school-ntlm-auth", line 180, in <module>
>     sys.exit(main())
>   File "/usr/bin/ucs-school-ntlm-auth", line 167, in main
>     if PasswordHash and pyMsChapV2.ChallengeResponse(options.Challenge, PasswordHash) == options.Response:
>   File "/usr/lib/pymodules/python2.7/univention/pyMsChapV2.py", line 84, in ChallengeResponse
>     Response = DesEncrypt(Challenge, ZPasswordHash[0:7])
>   File "/usr/lib/pymodules/python2.7/univention/pyMsChapV2.py", line 57, in DesEncrypt
>     return pyDes.des(expandDesKey(key), pyDes.ECB).encrypt(data)
>   File "/usr/lib/pymodules/python2.7/univention/pyDes.py", line 400, in __init__
>     raise ValueError("Invalid DES key size. Key must be exactly 8 bytes long.")
> ValueError: Invalid DES key size. Key must be exactly 8 bytes long.