MPPE with PPTP - external module (P K)

P K getpkme at gmail.com
Fri Apr 4 15:05:28 CEST 2014


Thanks Alan. I understand now.

On 4 April 2014 13:30, Alan DeKok <aland at deployingradius.com> wrote:
> P K wrote:
>> I guess what Andre is asking is:
>>
>> 1. Is there any way he could make changes to multiOTP so that it
>> passes the NT Password back to freeradius so that freeradius creates
>> the mppe stuff (MS-MPPE-Recv-Key, MS-MPPE-Send-Key etc) and sends to
>> NAS? Is yes then what is the parameter name that freeradius will need
>> to the mppe bit?
>
>   Yes.  The mschap program already does this using ntlm_auth.  So... you
> make MultiOTP behave the same as ntlm_auth.
>
>> If not then,
>> 2. Am I correct in understanding that multiOTP (when executed using
>> exec) needs to send MS-MPPE-Recv-Key, MS-MPPE-Send-Key etc as output
>> to freeradius? RFC2548 describes the process to create these keys.
>
>   That won't work for a number of reasons.
>
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list