PEAP without credentials

Stefan.Neis at t-online.de Stefan.Neis at t-online.de
Fri Sep 16 13:12:29 CEST 2005


          Hello,

> Hi, is there a way, to tell the freeradius to accept an incoming peap
> request, without asking for user credentials, or to accept any
> credentials?

No, I don't think so.

> Currently needed to use the credentials guest/guest. It would be
> simpler to accept any credentials, without loosing the encryption.

The problem is, encryption is based on the clear-text user password,
so this _must_ be stored on the server somehow (e.g. by using
guest/guest). While you can accept arbitrary PEAP requests, there's no
way to extract the clear text password from the request, thus the
server can't get the key for the encryption.

        HTH,
                 Stefan





More information about the Freeradius-Users mailing list