Using mschap authentication without EAP

Phil Mayers p.mayers at imperial.ac.uk
Fri Jul 21 13:14:42 CEST 2006


Thibault Le Meur wrote:
> rad_recv: Access-Request packet from host 127.0.0.1:32801, id=0, length=217
>       User-Name = "misterc"
>       CHAP-Challenge = 0xa26932d73791f27d1314426f740ab34e
>       CHAP-Password = 0x002e07a2cc1f27e7fbd22e7bb3721a3986

> 
> That means that your client is trying MS-CHAP, and MS-CHAP can't be used 
> with something else than NT-Hash passwords or cleartext passwords in the 
> authorize backend (in your case LDAP).

No, it does NOT.

It means his client is trying CHAP. Not MS-CHAP



More information about the Freeradius-Users mailing list