Re: Problem: Proxy cleartext-password requests to remote IAS that only

Erling Paulsen wrote:

[3] An IAS (Windows RADIUS). The problem is that this server ONLY accepts ms-chap1 or ms-chap2 session.

Is there a common way to bypass this problem, I cannot find any?

Fix IAS to accept User-Password. IAS *does* allow User-Password.

I was thinking it would be nice to let FreeRADIUS act as an ms-chap session client on behalf of the NAS, and then in the end only send ACCEPT/DENY back to the NAS instead of proxying directly to the IAS (which denies cleartext logins). Is this possible in some way?

Sure. Write the code. Alan DeKok.