Thanks Alan. I understand now. On 4 April 2014 13:30, Alan DeKok <aland@deployingradius.com> wrote:
P K wrote:
I guess what Andre is asking is:
1. Is there any way he could make changes to multiOTP so that it passes the NT Password back to freeradius so that freeradius creates the mppe stuff (MS-MPPE-Recv-Key, MS-MPPE-Send-Key etc) and sends to NAS? Is yes then what is the parameter name that freeradius will need to the mppe bit?
Yes. The mschap program already does this using ntlm_auth. So... you make MultiOTP behave the same as ntlm_auth.
If not then, 2. Am I correct in understanding that multiOTP (when executed using exec) needs to send MS-MPPE-Recv-Key, MS-MPPE-Send-Key etc as output to freeradius? RFC2548 describes the process to create these keys.
That won't work for a number of reasons.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html