CHAP, Cleartext-Password and External Script

[Alan Buxey]

EAP-TTLS is not PEAP

If you mean EAP-TTLS (PAP) as I expect you do. .. then that's because the users passwords is sent in the clear inside the tunnel.  So you receive it and can do things with it. 

PEAP and EAP-TTLS (mschapv2) send challenge response in the tunnel.  You will not get the password. 

alan
-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20131113/493d9cc7/attachment.html>