MS-CHAP and Local Authentication

[Phil Mayers]

ALMEIDA Antonio Jose wrote:
> Hello,
> Can someone tell me how can I configure the users file (with the default
> configuration - I'm just starting to use freeradius) to permit the same
> user to be authenticated by MS-CHAP and Local? Now I have something link
> this:
> 
> User1 Auth-Type := Local,  Password == "password"
> 
> User2 Auth-Type := MS-CHAP, Password == " password "
> 
> I need to make User1 and User2 the same.

Firstly, "Password" is a configure item and should really be set with := 
uncondtionally.

Secondly, you're setting Auth-Type with := which overwrites whatever is 
there, which is probably why MS-CHAP isn't working (Local will be 
overwriting it)

Assuming you have the server otherwise setup with the defaults, which 
have mschap BEFORE files in authorize, this will work:

user Auth-Type = Local, Password := "password"

Because (in the default config) mschap runs before files, therefore 
Auth-Type will already be set to MS-CHAP and the "=" won't overwrite it, 
but will set it if it's otherwise unset.