Yes this is VPN sorry for the confusion... DB is a mysql  and isnt hosted locally. I created it at my hosting company.  I setup a virtual machine with ubuntu server on my desktop with everything i need. This all works with clear-text passwords from my phone.

What do i need to do to enable nt-hash rather than pap? 

On Sun, Nov 4, 2012 at 6:12 PM, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,

>    yeah i haven't touched anything just setup ubuntu server + pptp +
>    freeradius + mysql thats it. 

ah. VPN stuff - you should have clarified.... the pointers about TTLS etc
from others was for enterprise wireless (WPA2/AES - aka WPA/RADIUS)

2 step approach - secure access to the DB in the first instance, second
would be to use eg NT-HASH rather than PAP for storage. where is the DB? same
host as the RADIUS? ensure only the processes that need access have access
and ensure only the account that needs privileges gets read access.

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html