How to allow wrong passwords in Peap-Mschapv2?

Alan DeKok aland at deployingradius.com
Fri Jan 17 13:48:06 UTC 2025


On Jan 17, 2025, at 4:03 AM, daoxuan shi <shidaoxuan at gmail.com> wrote:
> 
> I'm trying to deploy freeadius 3.0.21, and having a problem. I need to
> support peap-machapv2 and peap-gtc authentication protocols.
> My boss is very old and often enters wrong passwords. I need to temporarily
> bypass password verification for him. Regardless of whether the password is
> correct or not, his computer will eventually complete peap-machapv2
> authentication.
> I tried many methods, such as configuring his MAC address directly
> Auth-Type := Accept in authorize, but it didn't seem to work.

  It's impossible.

  And why is someone re-entering passwords?  The system should cache the password, and just re-use the cached passwords.

  So he's not "re-entering" the password wrong.  Something or someone is actively deleting the cached password, which forces him to re-enter it.

  Why is the cached password being deleted from his system?  Is someone deleting the WiFi configuration?  If so, why?

  Alan DeKok.



More information about the Freeradius-Users mailing list