Simple Freeradius configuration

[Nicholas Hall]

On 8/15/07, Kelly Ormsby <kelly7478 at gmail.com> wrote:
>
> Hi all,
>
> I've installed freeradius 1.1.6 on Fedora core 2 (kernel 2.6.5-1.358) (I
> can't upgrade please don't go there). I did a basic configure/make/make
> install.
>
> The only changes to the default configuration is adding an entry to the
> clients.conf file to allow requests from the Cisco VPN gateway. So far as
> I can tell CHAP and CHAPv2 should work straight out of the box (as per this
> page http://deployingradius.com/documents/configuration/auth_type.html).
>
> I've tried to authenticate using a local /etc/passwd user, and I get the
> output posted below. Is the default configuration enough for it to consult
> the /etc/passwd files (I thought that is what "DEFAULT Auth-Type = System"
> did?) or is there something else I need to add. Can CHAP (or CHAPv2) use
> /etc/passwd? I'm a little confused about the differences and I'm sure thats
> not helping :)
>
> I'd really rather not list the users individually in the users file, I'd
> like there to still only be one place to add users, so I'd like to use
> /etc/passwd file only. I apologise if there is documentation listed on this,
> I really feel that I've searched everywhere I can and no one seems to give
> real details.
>

CHAP requires a clear text password.  Tell your client to use PAP.  I
believe it will work without any configuration on the server.

-- 
Nicholas Hall
ngharo at gmail.com
262.208.6271
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070815/ee086895/attachment.html>