How to make an open auth realm?

Fajar A. Nugraha fajar at fajar.net
Wed Feb 10 23:14:57 CET 2010


On Thu, Feb 11, 2010 at 12:15 AM, Marcin S. <redark at tlen.pl> wrote:
> working(user from database):

>         MS-CHAP-Challenge = 0x789a686362d46451ad1b12d6d1fecfb4
>         MS-CHAP2-Response =
> 0x0100efef25766b55d6f212d5332ed21e16d70000000000000000ae2174f15545d09d57abb1befd659c8255b254db8f45bfc9

MS-CHAP does not send user's plain-text password. It requires the
server to know user's password.

> So what should I return to let in user without account in my database?

You can't. Not when using ms-chap.
You might be able to do so by disabling ms-chap in the server, and use
only pap (enabled by default).

-- 
Fajar




More information about the Freeradius-Users mailing list