Need examples for MSCHAPV2Authenticator

[Wang, Yu]

>1. I am in the process of updating my existing JRadius client to use MSCHAPV2Authenticator.
>Is there a document or example that explains on how to send the hashed passwords between Radius client and server using this authenticator?

We use Samba Winbind.
Check this link: http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOWTO/c3661f0a43b3f36eb9a1cda7b719d8349c9d13dd

>2. As per Wiki, it seems to be mandatory to mention CA issued certificates.
>Is there an example that uses certificates for mutual authentication?

The same link has an example for it too (under EAP tls clause).

>3. Based on different authenticators available in JRadius, MSCHAPV2 seems to be the strongest authentication possible. Is that understanding fair?
MSCHAPV2 is not strong. But you have TLS tunnel established so it should be ok.

https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/


Yu Wang


-----Original Message-----
From: freeradius-users-bounces+ywang10=fsu.edu at lists.freeradius.org [mailto:freeradius-users-bounces+ywang10=fsu.edu at lists.freeradius.org] On Behalf Of Rama Krishna
Sent: Thursday, July 25, 2013 6:12 PM
To: freeradius-users at lists.freeradius.org
Subject: Need examples for MSCHAPV2Authenticator

Already sent this email to David Bird, author of MSCHAPV2Authenticator of JRadius client and waiting for the reply.
Just sharing the same with mailing group so that I can receive response from at least one of folks if not David.
 
Here are my 3 questions.

Thanks,
Rama

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html