Hi,

I am using freeradius-0.5 on RH7.2. My NAS is sending
an Access Request with User_Name, Chap_Password, 
chap_id and Chap_Challenge as attributes.

The NAS calculates the Chap_Password as:
 MD5(chap_id + password + chap_challenge) 
where, "+" denotes concatenation.

The Chap_Challenge is sent as a separate attribute 
(not as the authenticator).

If I use a chap_challenge of 16 octets then everything
is OK, but if I use any other size (24 for instance)
then the authentication always fails and "Incorrect 
Password" is logged in the radius log-file.

Does freeradius accept CHAP challenge of only 16
octets? Is this some configurable parameter?

Thanks,
Puneet

__________________________________________________
Do You Yahoo!?
Yahoo! Games - play chess, backgammon, pool and more
http://games.yahoo.com/

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to