pam_radius - Choose Authentication Type

[Alan DeKok]

On Jul 11, 2016, at 5:16 AM, tirili at web.de wrote:
>   is there a possibility to force authentication type for a specific NAS?
>   Currently - when having pam_radius configured for SSHD logins there is
>   "User-Password" sent in clear.

  That's how the module works.

>   How could MSCHAP being forced?

  Edit the source code to pam_auth_radius.

  But there is no security gained by moving to MS-CHAP.

  Alan DeKok.