Authorize with SQL and not authenticate

Alan DeKok aland at
Wed Jul 4 18:44:01 CEST 2018

On Jul 4, 2018, at 12:22 PM, Tom Yard <tomyyard at> wrote:
> Now I have NTLM _AUTH with MSCHAP in Freeradius, and I can see I have
> enabled PAP autheentication and authorization too (in default and
> inner-tunnel files).

  That's enabled in the default config.

> Please can you tell me where I have to force PAP from the user side

  Configure the user side.

  There is *no* negotiation of PAP vs MS-CHAP in RADIUS.

> in ordr
> to just authorize the hosts? Users are logged into a host and after that
> the switch sends the MAC Address' host to the Freeradius server.

  Configure the switch to do MAC address authentication.  See the switch documentation for details.

  Alan DeKok.

More information about the Freeradius-Users mailing list