Has anyone ever come across a RADIUS test client which supports MSCHAP? Remote working is a wonderful thing, but it does mean I'm several hundred miles from my nearest NAS and wireless client. This obviously makes certain aspects of RADIUS testing a bit tricky. -- hugh
On Thu, 2007-07-12 at 11:46 -0500, Hugh Messenger wrote:
Has anyone ever come across a RADIUS test client which supports MSCHAP?
If you mean plain MS-CHAP, you can do it with radclient. Since, with plain MS-CHAP, the NAS generates the challenge and sends it to the radius server with the response. Since the response for any given challenge is the same, you can just capture a chal/resp pair (e.g. in debug mode) and replay it an arbitrary number of times. If you mean EAP/MS-CHAP (or EAP/PEAP/MS-CHAP) you can use eapol_test from wpa_supplicant.
Phil Mayers said:
On Thu, 2007-07-12 at 11:46 -0500, Hugh Messenger wrote:
Has anyone ever come across a RADIUS test client which supports MSCHAP?
If you mean plain MS-CHAP, you can do it with radclient. Since, with plain MS-CHAP, the NAS generates the challenge and sends it to the radius server with the response. Since the response for any given challenge is the same, you can just capture a chal/resp pair (e.g. in debug mode) and replay it an arbitrary number of times.
Ah HAH! That is exactly what I needed, thankyou.
If you mean EAP/MS-CHAP (or EAP/PEAP/MS-CHAP) you can use eapol_test from wpa_supplicant.
That's next month, as part of our baby-steps migration to FR. For now it's just our PPPOE clients. Then dialup. Then "funky stuff". -- hugh
JRadius simulator will do MSCHAPv2 very well... http://jradius.org/wiki/index.php/JRadiusSimulator On 7/12/07, Hugh Messenger <hugh@alaweb.com> wrote:
Phil Mayers said:
On Thu, 2007-07-12 at 11:46 -0500, Hugh Messenger wrote:
Has anyone ever come across a RADIUS test client which supports MSCHAP?
If you mean plain MS-CHAP, you can do it with radclient. Since, with plain MS-CHAP, the NAS generates the challenge and sends it to the radius server with the response. Since the response for any given challenge is the same, you can just capture a chal/resp pair (e.g. in debug mode) and replay it an arbitrary number of times.
Ah HAH! That is exactly what I needed, thankyou.
If you mean EAP/MS-CHAP (or EAP/PEAP/MS-CHAP) you can use eapol_test from wpa_supplicant.
That's next month, as part of our baby-steps migration to FR. For now it's just our PPPOE clients. Then dialup. Then "funky stuff".
-- hugh
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ryan Kramer said:
JRadius simulator will do MSCHAPv2 very well...
Oooh!! I want to have JRadiusSimulators babies! I've seen it recommended several times on this list, but I hadn't gotten round to trying it till now. Very useful. Doesn't do everything I need, but does several things I do need very well. Together with NTRadPing and radclient, I think just about all my RADIUS testing needs are now met. Thanks for the pointer. -- hugh
participants (3)
-
Hugh Messenger -
Phil Mayers -
Ryan Kramer