I remember seeing some traffic on this a while back, but can't find a satisfactory 
answer.

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxX
Here's my deal:
freeradius-0.7 working fine with _either_ Auth-Type := MS-CHAP or 
Auth-Type := PAP and the appropriate configs down in radiusd.conf.  All of
my passwords are stored in the clear in a MySQL database (also working fine).
So, for MS-CHAP to work, I have to turn on mschap in authorize{}.  This of
course doesn't work for PAP down in authenticate{} section.  How do I configure
this monster so that I can do PAP or MS-CHAP at the same time?  I guess the
question should really be extended to using CHAP at the same time as well.
Thanks in advance.

Chris Cosby
[EMAIL PROTECTED]

<!-- SNIP radiusd.conf -->
#       only use `mschap' if you are storing passwords in cleartext like:
#       +----+----------+-------------+----------------------------------+------+
#       | id | UserName | Attribute   | Value                            | op   |
#       +----+----------+-------------+----------------------------------+------+
#       |  1 | ccosby   | Password    | PlainTextPass                    | :=   |
#       +----+----------+-------------+----------------------------------+------+
#       1 row in set (0.00 sec)
authorize {
    preprocess
    files
    sql

    # I assume there some sort of `if' construct to use here just like in
    # authenticate{}, but I can't find it
    mschap
}


authenticate {
    mschap

    authtype PAP {
        pap
    }
}


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to