Hi Alan, How can I do that multiOTP either supply the NT-Password to FreeRADIUS (the best option for me), or how to supply the derived attributes MS-MPPE-Recv-Key, MS-MPPE-Send-Key etc. directly. As multiOTP is doing two factor authentication, the NT-Password is not sensitive, as a new is created each time. I already fixed that with TeKRADIUS by supplying the clear one time password back to TekRADIUS. Regards, Andre
P K wrote:
VPN works fine with CHAP & MSCHAP with multiotp. The trouble is encryption (PPTP with MPPE). When encryption is selected by the user, VPN fails. The problem is that radius will not send the required MPPE responses(MS-MPPE-Recv-Key, MS-MPPE-Send-Key etc.) to NAS.
Because the multiotp program isn't supplying them to FreeRADIUS.
I note that mschap module has options like use_mppe, require_encryption etc.. How can I get radius to send those when I'm using multiotp module to perform chap/mschap so that PPTP with MPPE works?
Make the multiotp program supply them to FreeRADIUS.
The keys are derived from the NT-Password, and the MS-CHAP information. Since FreeRADIUS doesn't have the NT-Password, it can't derive the keys.
Alan DeKok.