Issue with MSCHAP

[Ryan Summey]

Yes this is VPN sorry for the confusion... DB is a mysql  and isnt hosted
locally. I created it at my hosting company.  I setup a virtual machine
with ubuntu server on my desktop with everything i need. This all works
with clear-text passwords from my phone.

What do i need to do to enable nt-hash rather than pap?

On Sun, Nov 4, 2012 at 6:12 PM, alan buxey <A.L.M.Buxey at lboro.ac.uk> wrote:

> Hi,
>
> >    yeah i haven't touched anything just setup ubuntu server + pptp +
> >    freeradius + mysql thats it.
>
> ah. VPN stuff - you should have clarified.... the pointers about TTLS etc
> from others was for enterprise wireless (WPA2/AES - aka WPA/RADIUS)
>
> 2 step approach - secure access to the DB in the first instance, second
> would be to use eg NT-HASH rather than PAP for storage. where is the DB?
> same
> host as the RADIUS? ensure only the processes that need access have access
> and ensure only the account that needs privileges gets read access.
>
> alan
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20121104/091d3ecd/attachment.html>