Thank you for your answers alan...and deployingradius.com,it's a real gold mine. I have checked out radiusd.conf and the rlm_pap manual pages and I think I was unclear. The password is sent in "clear" but is stored in MD5 (because of ethical reason, the password should not clearly appear in the database). I think I just need to change the authentication request...but I can't find it. Thanks for your help. On Nov 14, 2007 2:34 PM, Alan DeKok <aland@deployingradius.com> wrote:

manIP wrote:

...

The user passwords are stored in my SQL database and encrypted in MD5...Could anyone tell me how to authenticate them (CHAP, PAP....) ?

PAP.

http://deployingradius.com/documents/protocols/compatibility.html

...

I know that I have to change the "authentication" request but I really don't know where it is located...

In 1.1.7, read "radiusd.conf". Look for the "pap" module.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

On Nov 14, 2007 8:23 PM, Alan DeKok <aland@deployingradius.com> wrote:

manIP wrote:

...

Thank you for your answers alan...and deployingradius.com,it's a real gold mine.

I'm trying to expand that into a book. So far, I'm (still) at about 150 pages of information I've seen *nowhere* else. But between work, FreeRADIUS and something called "family", there isn't much time left over for the book.

...

I have checked out radiusd.conf and the rlm_pap manual pages and I think I was unclear. The password is sent in "clear" but is stored in MD5 (because of ethical reason, the password should not clearly appear in the database). I think I just need to change the authentication request...but I can't find it.

You can't change the authentication request. It's controlled by the NAS.

I'm sorry again, I wouldn't have said "authentication request" but "authentication SQL request" made by the freeradius server to the SQL database. I hope I was clear now. BTW, good luck for your book...