MS-CHAP and Local Authentication
Hello, Can someone tell me how can I configure the users file (with the default configuration - I'm just starting to use freeradius) to permit the same user to be authenticated by MS-CHAP and Local? Now I have something link this: User1 Auth-Type := Local, Password == "password" User2 Auth-Type := MS-CHAP, Password == " password " I need to make User1 and User2 the same. Antonio
ALMEIDA Antonio Jose wrote:
Hello, Can someone tell me how can I configure the users file (with the default configuration - I'm just starting to use freeradius) to permit the same user to be authenticated by MS-CHAP and Local? Now I have something link this:
User1 Auth-Type := Local, Password == "password"
User2 Auth-Type := MS-CHAP, Password == " password "
I need to make User1 and User2 the same.
Firstly, "Password" is a configure item and should really be set with := uncondtionally. Secondly, you're setting Auth-Type with := which overwrites whatever is there, which is probably why MS-CHAP isn't working (Local will be overwriting it) Assuming you have the server otherwise setup with the defaults, which have mschap BEFORE files in authorize, this will work: user Auth-Type = Local, Password := "password" Because (in the default config) mschap runs before files, therefore Auth-Type will already be set to MS-CHAP and the "=" won't overwrite it, but will set it if it's otherwise unset.
participants (2)
-
ALMEIDA Antonio Jose -
Phil Mayers