Proxy RADIUS from MSCHAPv1 to MSCHAPv2

[Franco Pieressa]

I can't upgrade the NAS nor the RADIUS server :-(
 
What I need to know, is if it's theorically possible to translate the MSCHAPv1 authentication to a MSCHAPv2 authentication?  Can the keys and the challenge be converted? 
 
Thanks!
 
Regards> Date: Sat, 23 Feb 2008 14:40:02 +0100> From: aland at deployingradius.com> To: freeradius-users at lists.freeradius.org> Subject: Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2> > Franco Pieressa wrote:> > Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft> > RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate> > with a RADIUS server that ONLY support MSCHAPv2.> > This doesn't appear to have anything to do with FreeRADIUS.> > > Can I proxy RADIUS packets through FreeRADIUS and convert MSCHAPv1 <-->> > MSCHAPv2? To be more specific, is it possible to make the> > MS-CHAP-MPPE-Keys (v1) from then MS-MPPE-Send-Key (v2)?> > Why not just upgrade your NAS and RADIUS server? They both appear to> be substantially broken.> > And no, I don't think FreeRADIUS supports this. Maybe it's possible,> but as this is the first time I've seen anyone ask for it, it's not a> high priority.> > Alan DeKok.> -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080223/12b2779b/attachment.html>