<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
<br><br><div><div id="SkyDrivePlaceholder"></div>> Date: Tue, 27 Nov 2012 11:48:58 -0500<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: matching entry in users file<br>> <br>> vazoumana fofana wrote:<br>> > i ve got question about authentication : i want to set in users file, a<br>> > user who can be authenticated by two ways :<br>> > EAP-TLS (certificate) and EAP-TTLSP, PAP (login password).<br>> <br>> EAP-TLS doesn't really use the "users" file.<br>i wanted to say if a user is not on users file, it can't be authenticated with any protocole (EAP-TLS and others)<br>> <br>> > For a same and unique login, can i do this ? Or freeradius just check<br>> > the first entry wich corresponds ?<br>> <br>> FreeRADIUS authenticates the user with the information it has.<br>> <br>> If the user has a valid certificate, he's authenticated.<br>> <br>> If the user has a valid password, he's authenticated.<br>I try to do this :<br><br>napoleon SMD5-Password :="yyyyyyyyyyyyyyy"<br>
napoleon : NT-Password := "xxxxxxxxxxxxxx"<br><br><br>When i try to authenticate with nt-password, it fails. But when i delete SMD5 entry, it works.<br>In twice, freeradius has the right information.<br><br><br><br>> <br>> This is the same as a user trying PAP, CHAP, or MS-CHAP. They all<br>> work. They can all be used by the same user.<br>> <br>> Alan DeKok.<br>> <br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br></div> </div></body>
</html>