MSCHAPv2 followed by a smsotp authentication

[Alan DeKok]

Thomas Glanzmann wrote:
> the only difference I see here is that radius has a hex number in the
> state field while the propietary has digits. I assume that is why my
> propiertary client chokes.

  Possibly.  If so, the proprietary client doesn't implement RADIUS.

  The State field is not interpreted.  It's used simply as an opaque
blob that ties a challenge to a subsequent request.

  Alan DeKok.