MS-CHAP and Local Authentication

[ALMEIDA Antonio Jose]

Great, it's working now. 

Thanks
Antonio

-----Original Message-----
From:
freeradius-users-bounces+ajalmeida=modelocontinente.pt at lists.freeradius.
org
[mailto:freeradius-users-bounces+ajalmeida=modelocontinente.pt at lists.fre
eradius.org] On Behalf Of Phil Mayers
Sent: segunda-feira, 23 de Janeiro de 2006 12:27
To: FreeRadius users mailing list
Subject: Re: MS-CHAP and Local Authentication

ALMEIDA Antonio Jose wrote:
> Hello,
> Can someone tell me how can I configure the users file (with the
default
> configuration - I'm just starting to use freeradius) to permit the
same
> user to be authenticated by MS-CHAP and Local? Now I have something
link
> this:
> 
> User1 Auth-Type := Local,  Password == "password"
> 
> User2 Auth-Type := MS-CHAP, Password == " password "
> 
> I need to make User1 and User2 the same.

Firstly, "Password" is a configure item and should really be set with :=

uncondtionally.

Secondly, you're setting Auth-Type with := which overwrites whatever is 
there, which is probably why MS-CHAP isn't working (Local will be 
overwriting it)

Assuming you have the server otherwise setup with the defaults, which 
have mschap BEFORE files in authorize, this will work:

user Auth-Type = Local, Password := "password"

Because (in the default config) mschap runs before files, therefore 
Auth-Type will already be set to MS-CHAP and the "=" won't overwrite it,

but will set it if it's otherwise unset.
- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html