RE: Help needed with MS-CHAP

Just to further my own knowledge.

-----Original Message-----

Charles Blake wrote:

...

I am trying to set up a freeradius-1.1.0 server for authenticating users using MS-CHAP passwords.

I pretend to authenticate users against shadow.

You can't do that.

MS-CHAP requires the NT hash, the plaintext password from which it can derive the NT hash, or Samba configured as a domain member and use of the "ntlm_auth" helper.

Does this also apply to MS-CHAPv2?