pam_radius - Choose Authentication Type

Alan DeKok aland at
Mon Jul 11 15:08:13 CEST 2016

On Jul 11, 2016, at 5:16 AM, tirili at wrote:
>   is there a possibility to force authentication type for a specific NAS?
>   Currently - when having pam_radius configured for SSHD logins there is
>   "User-Password" sent in clear.

  That's how the module works.

>   How could MSCHAP being forced?

  Edit the source code to pam_auth_radius.

  But there is no security gained by moving to MS-CHAP.

  Alan DeKok.

More information about the Freeradius-Users mailing list