CHAP and Windows 2003 AD LDAP

[Alan DeKok]

Luke <freeradius at luke.bpa.nu> wrote:
> Unfortunately I need to support CHAP because it is used by an external
> global Dial-Up provider which the freeradius machine is authenticating for.

  If the passwords are in AD your ONLY choice is to use IAS, and even
then, only if ALL of the passwords are stored via what they call
"using reversible encryption".

  Alan DeKok.