How to enable Freeradius to support a smart card with AES encryption algorithm?

[Alan DeKok]

yao guoxian wrote:
> Thanks,Alan.
>     But I have a few questions.
>     First, if I create a new attribute "My-Aes-Password" and include it
> in the  Access-Requet packet, I should not include the attributes such
> as "User-Password" or "Chap-Password".Is it right?

  Yes.

>     The second question is about how to write modules.

  There is documentation.  See "rlm_example", for one.

> Sorry to ask the
> same question,but I want to verify my plan to see if it is pratical. The
> plan is as follow: I dont amend the module  "rlm_chap" , I just copy all
> files in the ./src/modules/rlm_chap/  to a new dictory "rlm_aes" and
> rename files rlm_chap.* to rlm_aes.*. Then I edit rlm-chap.c to alter
> it  to  use  AES  to  analyze  the  request packet. Is it pratical?

  Yes.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog