Auth-Type := Accept - CHAP problems
aland at deployingradius.com
Wed Aug 20 17:37:25 CEST 2008
Thomas Buchberger wrote:
> With PAP it works - but not with CHAP. That's the problem ...
> I think the CHAP module handles wrong passwords and auth-type different
> than the rlm_pap module.
No. It doesn't.
> Config looks like this:
> DEFAULT Auth-Type := Accept
This completely bypasses any password checks.
> ERX-Virtual-Router-Name = "vpn:XXX",
> ERX-Egress-Policy-Name = "XXX",
> ERX-Local-Loopback-Interface = "loopback 255",
> Service-Type = Framed-User,
> Framed-Protocol = PPP,
> Fall-Through = Yes
> Test100 Password = "Test100"
Test100 Cleartext-Password := "Test100"
That's been documented since at least 1.1.4.
More information about the Freeradius-Users