1rlm_digest(5)                  FreeRADIUS Module                 rlm_digest(5)
2
3
4

NAME

6       rlm_digest - FreeRADIUS Module
7

DESCRIPTION

9       The  rlm_digest module authenticates RADIUS Access-Request packets that
10       contain Cisco SIP digest authentication attributes.  The module  should
11       be listed in the authorize and authenticate sections of radiusd.conf.
12

CONFIGURATION

14       The  digest module requires no additional configuration items.  When it
15       is being used to authenticate requests, however, it does require access
16       to  the  clear-text  password  for  the user.  Hashed passwords are not
17       acceptable, and will not work.
18

EXAMPLES

20       Add the following lines to the top of your 'raddb/users' file:
21
22       #---
23       test Auth-Type := Digest, User-Password = "test"
24            Reply-Message = "Hello, test with digest"
25       #---
26
27       Once the server has been started (debugging mode is  recommended),  use
28       'radclient to send the following packet to the server:
29
30       $  radclient -f digest localhost auth testing123
31
32       Where 'digest' is a file containing:
33
34         User-Name = "test",
35         Digest-Response = "631d6d73147add2f9e437f59bbc3aeb7",
36         Digest-Realm = "testrealm",
37         Digest-Nonce = "1234abcd",
38         Digest-Method = "INVITE",
39         Digest-URI = "sip:5555551212@example.com",
40         Digest-Algorithm = "MD5",
41         Digest-User-Name = "test",
42         Message-Authenticator = ""
43
44       You should see the authentication succeed.
45
46

SECTIONS

48       authorize, authenticate
49

FILES

51       /etc/raddb/radiusd.conf, draft-sterman-aaa-sip-00.txt
52

AUTHOR

54       Alan DeKok <aland@ox.org>
55
56
57
58                                 31 March 2005                   rlm_digest(5)