MSCHAP version

Alan DeKok aland at
Fri Nov 29 13:32:59 CET 2019

> On Nov 29, 2019, at 4:48 AM, FRANKS, Andy (SHREWSBURY AND TELFORD HOSPITAL NHS TRUST) via Freeradius-Users <freeradius-users at> wrote:
> Hi all,
>  Hopefully trivial this one. Is there a way of extracting the MSCHAP version once the mschap module determines the control:Auth-Type is mschap?
> e.g.
> mschap: Client is using MS-CHAPv1 with NT-Password
> mschap: Client is using MS-CHAPv2
> I'd like to then do some stuff, possibly decline users using mschapv1 or just store that a user used v1?

  If there's an MS-CHAP-Response attribute, it's version 1.  If there's a MS-CHAP2-Response attribute, it's version 2.

  Alan DeKok.

More information about the Freeradius-Users mailing list