Disable PAP and use only CHAP

Fajar A. Nugraha list at fajar.net
Thu May 30 08:33:07 CEST 2013


On Thu, May 30, 2013 at 12:22 PM, Navodit Bhardwaj
<navodit.bhardwaj at gmail.com> wrote:
> Hi
>
> I want to disable PAP and other authenticaiton methods and use only CHAP.
> Means if user request does not contain CHAP is should be Rejected.
>
> I have tried to disable PAP from the modules and
> /usr/local/etc/raddb/sites-enabled/default, but still the Access is
> Accepted.
>
> how to enable only CHAP??

If you use latest 2.x version, and have followed the basic guide on
wiki page, you can use something like this on sites-enabled/default:

authenticate {
...
        Auth-Type PAP {
                reject
        }
...
}

It should reject all pap requests.

-- 
Fajar


More information about the Freeradius-Users mailing list