CHAP problem with PPPoE server

[Phil Mayers]

On 09/03/11 10:03, Paul Thornton wrote:
>
> This is the part that is the mystery.  There seems to be scarce
> information out there about how pppd functions when using radius as a
> back end (apart from it should 'just work') - most of the documentation
> about pppd relates to dial-up as a ppp client or a server without using
> radius.

The pppd radius plugin basically replaces the built-in functions in pppd:

check_pap
check_chap
check_mschap

...with it's own, radius-based versions (not those names - something 
else). It (like most of pppd) is a horrible bit of code, but it does 
basically work ;o)

You need to configure pppd itself to use "chap". This is independent of 
any radius config - it'll be something like:

/etc/ppp/options.<theconnection>:

require-chap
refuse-pap
refuse-mschap
refuse-mschap-v2

...or those same options on the pppd command line, or however your PPPoE 
daemon takes them.