plain-text password not get with CHAP

[Herwin Weststrate]

On 19-12-18 11:51, Imdad Hasan wrote:
> Respected All,
> 
> I using Default *Auth-Type = Accept* and *php external script* for custom
> authentication. That is working fine with only pap in PPPoE, But not
> working with CHAP, MS-CHAPv2 etc.
> 
> I found one reason was the external script not get the plain-text
> password.Usually i get password in external php script with
> *trim(getenv('USER_PASSWORD'),'"');
> *this env variable.
> 
> So, any way to get plain-text password in external script when chap is on
> in mikrotik?

No, simply because CHAP and MSCHAP don't send the plaintext password,
but hashes of the password.

If you have access to the plaintext password in PHP, you could add this
to the config list and let the chap/mschap modules take care of it (but
then it would be unlikely you really needed PHP in the first place),
otherwise you're out of luck.

See http://deployingradius.com/documents/protocols/compatibility.html
for a list of possible password hashing compatibilities.

-- 
Herwin Weststrate