Re: Authentication password used by client

Thanks a lot !!! On Mon, 2009-09-14 at 10:10 +0100, Alan Buxey wrote:

Hi,

huh? PAP is plain text authentication - sure. but RADIUS uses shared secrets between the NAS and the server - and the password is one of the entities that will get a little bit of help witht his.

read a basic RADIUS book or the set of RFCs and it will tell you this.

however, this is not strong encryption...and methods that use challenge response (eg MSCHAP) are recommended if you have worries about passwords whizzing across the network.

alan