Support for other hash (like MD5, SHA1) using MSCHAPv2

Brivaldo Junior brivaldo.junior at ufms.br
Thu Feb 3 18:10:07 CET 2011


> string, known as the "CHAP challenge", and the client sends back a 
> hash
> of (challenge + password). This hashed value is only of use to you if
 you

 after I read a little of MSCHAP RFC, I understand this.

> already know the cleartext password, because you can calculate the 
> hash
> of (same challenge + expected password) and see if you get the same
> value, and so decide if the user knows the correct password. But you
> can't use the CHAP response to login to anything else. You can't even
 use


 Thanks for support, I spend some hours, but I really learn more, and 
 this is a good
 thing.


 Regards,
 Brivaldo Jr



More information about the Freeradius-Devel mailing list