MSCHAP version

Alan DeKok aland at deployingradius.com
Fri Nov 29 13:32:59 CET 2019



> On Nov 29, 2019, at 4:48 AM, FRANKS, Andy (SHREWSBURY AND TELFORD HOSPITAL NHS TRUST) via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> 
> Hi all,
>  Hopefully trivial this one. Is there a way of extracting the MSCHAP version once the mschap module determines the control:Auth-Type is mschap?
> 
> e.g.
> mschap: Client is using MS-CHAPv1 with NT-Password
> 
> mschap: Client is using MS-CHAPv2
> 
> I'd like to then do some stuff, possibly decline users using mschapv1 or just store that a user used v1?

  If there's an MS-CHAP-Response attribute, it's version 1.  If there's a MS-CHAP2-Response attribute, it's version 2.

  Alan DeKok.




More information about the Freeradius-Users mailing list