Using mschap authentication without EAP

Thibault Le Meur Thibault.LeMeur at supelec.fr
Fri Jul 21 13:32:38 CEST 2006


> 
> Thibault Le Meur wrote:
> > rad_recv: Access-Request packet from host 127.0.0.1:32801, 
> id=0, length=217
> >       User-Name = "misterc"
> >       CHAP-Challenge = 0xa26932d73791f27d1314426f740ab34e
> >       CHAP-Password = 0x002e07a2cc1f27e7fbd22e7bb3721a3986
> 
> > 
> > That means that your client is trying MS-CHAP, and MS-CHAP can't be 
> > used
> > with something else than NT-Hash passwords or cleartext 
> passwords in the 
> > authorize backend (in your case LDAP).
> 
> No, it does NOT.
> 
> It means his client is trying CHAP. Not MS-CHAP

You're right... sorry I was too fast in my reply... ;-) but the conclusion
was about the same : use a cleartext password (except for the Nt-hash
alternative ;-) ).

Thibault





More information about the Freeradius-Users mailing list