I was confused with sec 2.1 Challenge/Response and 2.2 Interoperation
with PAP and CHAP of the rfc2865.

I made an access-request with User-Name and CHAP-Password written in a
file with the radclient   The server authenticated successfully against
the corresponding Password entry. This means the request has simulated a
NAS-Client's CHAP request and successfully authenticated right?

Then in what case is the Challenge/Response used. And I guess rlm_chap
module is provided to do the same. And how do I configure the server to
issue challenges (with messages Access-Challenge)?

- Murugaiyan. 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, January 24, 2002 3:52 PM
To: [EMAIL PROTECTED]
Subject: Re: CHAP queries 

"N Murugaiyan" <[EMAIL PROTECTED]> wrote:
> I would like to know how to configure the server for a particular user
> to issue a CHAP challenge and then authenticate.

  That's not the way CHAP works.  The NAS takes care of sending the
challenge over the PPP link to the client, and then forwards the
challenge and response to the RADIUS server.
 
> Does the radclient have the capabilities for responding to
> CHAP-Challenges?

  No.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to