"Dr. Muhammad Masroor Ali" <[EMAIL PROTECTED]> wrote:
> One reason we suspected but could not find how to solve is, the NAS
> has an "Accounting CHAP Secret" (in addition to the usual "RADIUS Chap
> Secret").

  There is no "Accounting CHAP Secret".  There is no "RADIUS Chap
Secret".

  There IS a shared secret between the NAS and the server.  It MAY be
different for accounting and authentication packets.

  But it has NOTHING to do with CHAP.

> Help says that this is "Authentication replies from RADIUS
> Accounting Server".

  That sounds like a bad description of the radius shared secret.

> We could not find a place in radius.conf or some
> place else where to put this password, so that the NAS can verify
> authenticity of the accounting server.

  'clients', or 'clients.conf' as the shared secret.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to