####################################################
####################################################
Here's my radiusd.conf that works for me
####################################################
####################################################
Modules {
# You might have more here
# this is just the relevant part
mschap {
authtype = MS-CHAP
}
}
authorize {
preprocess
suffix
sql
mschap
}
authenticate {
mschap
}
preacct {
preprocess
suffix
files
}
accounting {
acct_unique
detail
sql
radutmp
}
session {
sql
radutmp
}
####################################################
####################################################
Here's my users file:
####################################################
####################################################
DEFAULT Auth-Type := Local
Fall-Through = Yes
DEFAULT Service-Type == Framed-User
Framed-IP-Address = 255.255.255.254,
Framed-MTU = 576,
Service-Type = Framed-User,
Fall-Through = Yes
DEFAULT Acct-Authentic == RADIUS
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Netmask = 255.255.255.255,
Ascend-Assign-IP-Pool = 1,
Ascend-Idle-Limit = 900,
Ascend-Maximum-Channels = 1
I'm not specifying an Auth-Type at all in my sql tables.
Hope this helps.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of
Christopher Cosby
Sent: Wednesday, July 31, 2002 2:03 PM
To: [EMAIL PROTECTED]
Subject: Configuring to allow MS-CHAP or PAP
I remember seeing some traffic on this a while back, but can't find a
satisfactory answer.
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxX
Here's my deal:
freeradius-0.7 working fine with _either_ Auth-Type := MS-CHAP or
Auth-Type := PAP and the appropriate configs down in radiusd.conf. All
of my passwords are stored in the clear in a MySQL database (also
working fine). So, for MS-CHAP to work, I have to turn on mschap in
authorize{}. This of course doesn't work for PAP down in authenticate{}
section. How do I configure this monster so that I can do PAP or
MS-CHAP at the same time? I guess the question should really be
extended to using CHAP at the same time as well. Thanks in advance.
Chris Cosby
[EMAIL PROTECTED]
<!-- SNIP radiusd.conf -->
# only use `mschap' if you are storing passwords in cleartext
like:
#
+----+----------+-------------+----------------------------------+------
+
# | id | UserName | Attribute | Value
| op |
#
+----+----------+-------------+----------------------------------+------
+
# | 1 | ccosby | Password | PlainTextPass
| := |
#
+----+----------+-------------+----------------------------------+------
+
# 1 row in set (0.00 sec)
authorize {
preprocess
files
sql
# I assume there some sort of `if' construct to use here just like
in
# authenticate{}, but I can't find it
mschap
}
authenticate {
mschap
authtype PAP {
pap
}
}
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
