The story of PAP, CHAP and the blank password

Wynand Meijer wynand at
Wed Mar 16 13:14:12 CET 2011

Thanks for the feedback,

We have made contact with the NAS 'provider' and requested they resolve 
the issue by replacing the string "void" with nothing. As the passed 
string is the 'cause' of the problem we would rather them fix it than we 
try and hack around it.

If these errors keep persisting we will look into a solution as you 
suggested like 00121231234:00121231234 or 00121231234:1111


On 16/03/2011 13:12, Alan Buxey wrote:
> Hi,
>> WARNING: Please update your configuration, and remove 'Auth-Type = Local'
>> WARNING: Use the PAP or CHAP modules instead.
> i'd follow that advice. FR knows what to do when it sees suitable things.
> anyway, the 'void' is being sent by the NAS - and its being sent CHAP'd too
> can your kit not do the usual naff thing of sending the CSI as the password
> so you just have a simple pair
> 00121231234:00121231234
> ? thats whats usually done in these sorts of 'just let them on' environments
> alan

More information about the Freeradius-Users mailing list