Problem: Proxy cleartext-password requests to remote IAS that only

[Alan DeKok]

Erling Paulsen wrote:
> [3] An IAS (Windows RADIUS). The problem is that this server ONLY accepts
> ms-chap1 or ms-chap2 session.
>
> Is there a common way to bypass this problem, I cannot find any?

  Fix IAS to accept User-Password.  IAS *does* allow User-Password.

> I was thinking it would be nice to let FreeRADIUS act as an
> ms-chap session client on behalf of the NAS, and then in the end only
> send ACCEPT/DENY back to the NAS instead of proxying directly to the IAS
> (which denies cleartext logins). Is this possible in some way?

  Sure.  Write the code.

  Alan DeKok.