From db375e2520b7a79b74e8f6415f055a76e81005d7 Mon Sep 17 00:00:00 2001 From: Ted Trask Date: Mon, 15 Sep 2014 18:25:29 +0000 Subject: Fix password validation for DES passwords --- freeradius3-model.lua | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/freeradius3-model.lua b/freeradius3-model.lua index 1606971..df85118 100644 --- a/freeradius3-model.lua +++ b/freeradius3-model.lua @@ -554,7 +554,8 @@ function mymodule.update_passwd(self, passwd) local success = false passwd.value.oldpassword.errtxt = "Incorrect password" local algo_salt, hash = string.match(pwhash, "^(%$%d%$[a-zA-Z0-9./]+%$)(.*)") - if algo_salt ~= nil and hash ~= nil then + if not algo_salt then algo_salt = string.sub(pwhash, 1, 3) end + if algo_salt ~= nil then if (pwhash == posix.crypt(passwd.value.oldpassword.value, algo_salt)) then success = true passwd.value.oldpassword.errtxt = nil -- cgit v1.2.3