I remember seeing some traffic on this a while back, but can't find a satisfactory
answer.
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxX
Here's my deal:
freeradius-0.7 working fine with _either_ Auth-Type := MS-CHAP or
Auth-Type := PAP and the appropriate configs down in radiusd.conf. All of
my passwords are stored in the clear in a MySQL database (also working fine).
So, for MS-CHAP to work, I have to turn on mschap in authorize{}. This of
course doesn't work for PAP down in authenticate{} section. How do I configure
this monster so that I can do PAP or MS-CHAP at the same time? I guess the
question should really be extended to using CHAP at the same time as well.
Thanks in advance.
Chris Cosby
[EMAIL PROTECTED]
<!-- SNIP radiusd.conf -->
# only use `mschap' if you are storing passwords in cleartext like:
# +----+----------+-------------+----------------------------------+------+
# | id | UserName | Attribute | Value | op |
# +----+----------+-------------+----------------------------------+------+
# | 1 | ccosby | Password | PlainTextPass | := |
# +----+----------+-------------+----------------------------------+------+
# 1 row in set (0.00 sec)
authorize {
preprocess
files
sql
# I assume there some sort of `if' construct to use here just like in
# authenticate{}, but I can't find it
mschap
}
authenticate {
mschap
authtype PAP {
pap
}
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html