Support for other hash (like MD5, SHA1) using MSCHAPv2

Alan DeKok aland at
Wed Feb 2 19:05:43 CET 2011

Brivaldo Junior wrote:
> I really try to understand why it's impossible, because another softwares
> like dovecot and postfix do this. 


  You *cannot* turn MS-CHAP into the cleartext-password.  It's impossible.

> I imagine, the FreeRadius work with
> auth using another form (OpenLDAP is used do retrieve information, not
> to parse or auth, and of course, I see this enviroment on FreeRadius,
> and like it).
> Get information of OpenLDAP, encode password from user, and compare each
> other,
> this idea is so simple, of course, on simple enviroment too. On
> this case, I will use the "hard way", to understand why it's impossible.

  Yes, *that* is possible.  Turning Cleartext-Password into MS-CHAP.

  But that's not what you asked.

  Alan DeKok.

More information about the Freeradius-Devel mailing list