FreeRADIUS strange behavior for 6.4.4 (AP89xx)

[BillP]

This question was originally posted by Winnie on APC forums on 6/22/2017

---

Dear APC teammates,

I am Winnie from SE Hong Kong office who is testing freeRADIUS authentication for AP8958EU3 and AP8959EU3 for an upcoming project. For exactly the same RADIUS user name, password and configuration, we successfully tested RADIUS with Netbotz 250, InRow SC Cooling and Symmetra PX UPS. But when we came across AP8958EU3 and AP8959EU3

- AOS version 6.4.4

- Rack PDU version 6.4.4

The RADIUS authentication failed. Upon further dignaosis, the RADIUS log shows that the RADIUS server did not receive the correct password but "correct password appended with a strange combination of characters such as /000/000...", that had triggered the RADIUS server to send ACCESS-REJECT message to RPDU.

Kindly help to provide solution asap as a new customer is waiting for the result to place 100 pcs RPDU order.

FYI, the RADIUS server is using PAP and cleartext password format.

[BillP · Accepted solution]

This reply was originally posted by Winnie on APC forums on 6/22/2017

---

Just figured out that it has something to do with "filter_password" sub-function under "authorize" main function at .../.../raddb/sites-enabled/default file. We need to enable this filter_password function to allow the broken password to be reformatted. Restart RADIUS server after modification. Now we can authorize with FreeRADIUS properly. Thanks