NLTM_AUTH (PAP) and MS-CHAP2 together?

Alan DeKok aland at
Sat Jan 3 20:38:23 CET 2009

Mike Diggins wrote:
> After getting NTLM_AUTH working using PAP, I decided to try the MS-CHAP2
> as well and that appears to work, but I had to remove the line "DEFAULT
> Auth-Type := ntlm_auth" from my users file.

  Use "=", not ":=". I updated the "howto" on my web site a few weeks
ago to reflect this.

> When I do that MS-CHAP2
> works, but PAP doesn't. I will have various radius clients, some of
> which support MS-CHAP2, but some do not. How can I use both together? My
> users will be connecting to both services, so defining a specific
> AUTH-TYPE for each user won't work.

  The above change should work.

  Alan DeKok.

More information about the Freeradius-Users mailing list