Mike <mike@mfenton.com> wrote:
I am setting up FreeRadius to be used to authenticate dial-up and DSL users (@place.com). I would like to use the unix passwd file because we already have a radius server in place that is using the unix passwd file. However, from what I understand CHAP will not work against the unix passwd?
That's what the FAQ says.
Is this true, and does windows use this for dial-up and PPPOE connections? I do not know what windows uses.
Windows uses whatever the user told it to use, which might be CHAP. Since CHAP won't work, the users will probably try PAP.
Also, I will simply make a script that will copy the passwd, shadow file, and the group file somewhere and tell radius to use these files oppose to the default files. This way I can revoke and grant people access to the radius server.
Why? Create a Unix group called "disabled", and put users into that group. See the FAQ. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog