Dear Christopher Cosby,
Set Auth-Type := PAP for user, in mschap configuration
mschap {
authtype = MS-CHAP
}
add mschap to authorize and authenticate, add pap to authenticate.
Now, by default, authentication will be pap, unless mschap module
doesn't detect peer want MS-CHAP. In last case mschap will automatically
change Auth-Type from PAP to MS-CHAP.
--Thursday, August 1, 2002, 1:02:34 AM, you wrote to [EMAIL PROTECTED]:
CC> I remember seeing some traffic on this a while back, but can't find a satisfactory
answer.
CC> xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxX
CC> Here's my deal:
CC> freeradius-0.7 working fine with _either_ Auth-Type := MS-CHAP or
CC> Auth-Type := PAP and the appropriate configs down in radiusd.conf. All of
CC> my passwords are stored in the clear in a MySQL database (also working fine).
CC> So, for MS-CHAP to work, I have to turn on mschap in authorize{}. This of
CC> course doesn't work for PAP down in authenticate{} section. How do I configure
CC> this monster so that I can do PAP or MS-CHAP at the same time? I guess the
CC> question should really be extended to using CHAP at the same time as well.
CC> Thanks in advance.
CC> Chris Cosby
CC> [EMAIL PROTECTED]
CC> <!-- SNIP radiusd.conf -->
CC> # only use `mschap' if you are storing passwords in cleartext like:
CC> # +----+----------+-------------+----------------------------------+------+
CC> # | id | UserName | Attribute | Value | op |
CC> # +----+----------+-------------+----------------------------------+------+
CC> # | 1 | ccosby | Password | PlainTextPass | := |
CC> # +----+----------+-------------+----------------------------------+------+
CC> # 1 row in set (0.00 sec)
CC> authorize {
CC> preprocess
CC> files
CC> sql
CC> # I assume there some sort of `if' construct to use here just like in
CC> # authenticate{}, but I can't find it
CC> mschap
CC> }
CC> authenticate {
CC> mschap
CC> authtype PAP {
CC> pap
CC> }
CC> }
CC> -
CC> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
~/ZARAZA
������������� ���� ����� ������� ��� ������������ ���������. (���)
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
