11 Jul
2016
11 Jul
'16
9:08 a.m.
On Jul 11, 2016, at 5:16 AM, tirili@web.de wrote:
is there a possibility to force authentication type for a specific NAS? Currently - when having pam_radius configured for SSHD logins there is "User-Password" sent in clear.
That's how the module works.
How could MSCHAP being forced?
Edit the source code to pam_auth_radius. But there is no security gained by moving to MS-CHAP. Alan DeKok.