FreeRadius + MySql + Crypt-Password unable to authenticate

Marcel Kraan marcel at
Mon Jul 29 17:03:17 CEST 2013

Thanks. I have a genius en202 outdoor wifi router and i don't think i can change it to use PAP.  

So i'am only able to use ClearText-Password? 
If i'am  wrong i will be very happy

Marcel Kraan

> On 29 jul. 2013, at 15:04, "Fajar A. Nugraha" <list at> wrote:
>> On Mon, Jul 29, 2013 at 7:39 PM, Marcel Kraan <marcel at> wrote:
>> Thanks… i think my wifi router does not have that option…  
>>> On 29 jul. 2013, at 14:15, Navodit Bhardwaj <navodit.bhardwaj at> wrote:
>>> By default PAP, CHAP.. are enabled in FR.
>>> You may need to change the authentication settings in your client. i.e Wifi Router to send PAP enabled access-request.
>>>> On Mon, Jul 29, 2013 at 5:25 PM, Marcel Kraan <marcel at> wrote:
>>>> Yes i want to use "PAP" (?) but where do i change that?
>>>> into my Wifi router ? or in the Freeradius config?
> As Phil said, you need to change it in the client.
> If you have windows 8 clients, IIRC it has built-in support for PEAP-GTC and TTLS-PAP (which is also supported by linux, android, macs). In both cases the client passes cleartext password inside encrypted tunnel, so crypt passwords on FR side should work fine.
> If you have older windows clients, and don't have third-party PEAP-GTC/TTLS-PAP-capable supplicant, then you're stuck with EAP-MSCHAP, so you need to store password as clear text or nt-hash.
> -- 
> Fajar
> -
> List info/subscribe/unsubscribe? See
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6127 bytes
Desc: not available
URL: <>

More information about the Freeradius-Users mailing list