23 Feb
2019
23 Feb
'19
5:46 p.m.
On Feb 23, 2019, at 5:04 PM, Phil Grace <phil.grace@hssd.k12.ar.us> wrote:
I’m not sure, I just followed google’s provided setup guide for freeradius to work with their LDAP service.
So they say it will work with MS-CHAP?
So would I just disable MS-CHAP or do something different with LDAP config to get the “known good”password. Would my issue probably be in the inner-tunnel file or the default file?
You can't really disable MS-CHAP. It's chosen by the users system, and sent to FreeRADIUS. If you disable MS-CHAP on the server, all that happens is the user gets rejected when they try to use MS-CHAP. Alan DeKok.