From 01a187c3ec8f283f0a88ee7dff54336ef38f05c1 Mon Sep 17 00:00:00 2001
From: zackbcom <zack@zackb.com>
Date: Mon, 13 Apr 2015 00:54:23 -0500
Subject: Show max shared secret length

Shared secrets longer than 31 characters will display garbage passwords.
Another cause of garbage passwords being logged is the secret being too long. Certain NAS boxes have limitations on the length of the secret and don't complain about it. FreeRADIUS is limited to 31 characters for the shared secret.

http://wiki.freeradius.org/guide/faq#Common-problems-and-their-solutions
---
 config/freeradius2/freeradiusclients.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/freeradius2/freeradiusclients.xml b/config/freeradius2/freeradiusclients.xml
index 4e66a597..99ac2af1 100644
--- a/config/freeradius2/freeradiusclients.xml
+++ b/config/freeradius2/freeradiusclients.xml
@@ -163,7 +163,7 @@
 		<field>
 			<fielddescr>Client Shared Secret</fielddescr>
 			<fieldname>varclientsharedsecret</fieldname>
-			<description><![CDATA[Enter the shared secret of the RADIUS client here. This is the shared secret (password) which the NAS (switch or accesspoint) needs to communicate with the RADIUS server.]]></description>
+			<description><![CDATA[Enter the shared secret of the RADIUS client here. This is the shared secret (password) which the NAS (switch or accesspoint) needs to communicate with the RADIUS server. FreeRADIUS is limited to 31 characters for the shared secret.]]></description>
 			<type>password</type>
 			<required/>
 		</field>
-- 
cgit v1.2.3