MPPE with PPTP - external module (P K)

[Alan DeKok]

P K wrote:
> I guess what Andre is asking is:
> 
> 1. Is there any way he could make changes to multiOTP so that it
> passes the NT Password back to freeradius so that freeradius creates
> the mppe stuff (MS-MPPE-Recv-Key, MS-MPPE-Send-Key etc) and sends to
> NAS? Is yes then what is the parameter name that freeradius will need
> to the mppe bit?

  Yes.  The mschap program already does this using ntlm_auth.  So... you
make MultiOTP behave the same as ntlm_auth.

> If not then,
> 2. Am I correct in understanding that multiOTP (when executed using
> exec) needs to send MS-MPPE-Recv-Key, MS-MPPE-Send-Key etc as output
> to freeradius? RFC2548 describes the process to create these keys.

  That won't work for a number of reasons.

  Alan DeKok.