rlm_digest(5)

💅 rlm_digest — FreeRADIUS Module 🎀

okay so bestie, this is the manual page for rlm_digest, which lives in section 5 of the FreeRADIUS Module docs. buckle up, it's short but it's cute 🦋

---

✨ NAME ✨

rlm_digest — literally the FreeRADIUS Module, that's the whole name, slay 💅

---

🌸 DESCRIPTION 🌸

so the rlm_digest module authenticates RADIUS Access-Request packets that contain Cisco SIP digest authentication attributes. yep, that's the whole vibe — SIP digest, Cisco flavored, iconic 👑

and like, important: the module should be listed in the authorize and authenticate sections of radiusd.conf. both of them. don't skip one, bestie, it's giving "I forgot to plug in the second cable" energy 😭

---

🎀 CONFIGURATION 🎀

good news: the digest module requires no additional configuration items. zero. none. it's low maintenance, main character energy fr fr ✨

but — and this is the plot twist — when it's being used to authenticate requests, it does require access to the clear-text password for the user. hashed passwords are not acceptable, and will not work. periodt. no cap. if your password is hashed, this module is gonna look at you like 💀

lowkey a big deal: hashed passwords = no auth. clear-text only. iykyk 🙈

---

🧚 EXAMPLES 🧚

okay so add the following lines to the top of your raddb/users file:

#---
test Auth-Type := Digest, User-Password = "test"
     Reply-Message = "Hello, test with digest"
#---

once the server has been started (debugging mode is recommended, highly recommend, do it 🌈), use radclient to send the following packet to the server:

$  radclient -f digest localhost auth testing123

where digest is a file containing:

  User-Name = "test",
  Digest-Response = "631d6d73147add2f9e437f59bbc3aeb7",
  Digest-Realm = "testrealm",
  Digest-Nonce = "1234abcd",
  Digest-Method = "INVITE",
  Digest-URI = "sip:5555551212@example.com",
  Digest-Algorithm = "MD5",
  Digest-User-Name = "test",
  Message-Authenticator = ""

and then?? you should see the authentication succeed. ate. 🔥

---

💜 SECTIONS 💜

• authorize
• authenticate

---

🍓 FILES 🍓

• /etc/raddb/radiusd.conf
• draft-sterman-aaa-sip-00.txt

---

👑 AUTHOR 👑

Alan DeKok <aland@ox.org> — the icon, the legend, the moment 🫶

---

and that's the whole page bestie, you're officially a rlm_digest expert ✨ this was rlm_digest(5) from the FreeRADIUS Module docs, dated 31 March 2005. oldie but a goodie, mwah 💖