Authenticate WPA enterprise from custom service

[Alan DeKok]

On Nov 27, 2014, at 9:57 AM, Adnan Miljkovic <adnan at green.ba> wrote:

> But when I try to login from my Android device I do not get the password, it is empty. I am using the following settings on my Android device,  MSCHAPV2, and adding the identity (my username) and password. 

  When you use MS-CHAP, there is *no* User-Password in the request.

> Is it possible to get the password in plain text from the remote device? I am missing some concept here, is there another way of authentication for WPA enterprise?

  FreeRADIUS implements MS-CHAP.  You should pass the “known good” password to FreeRADIUS, instead of writing your own authentication software.

  It is *impossible* to get the User-Password from MS-CHAP.

  Alan DeKok.