Alan DeKok wrote:

Sean Perry <[EMAIL PROTECTED]> wrote:

 Not with CHAP.  AD doesn't allow you to look at the users clear-text
passwords, so CHAP is impossible.

I have solved this in other cases by using the password to rebind as the user. If the bind fails the password is incorrect. What I have not seen is a way to get the password out of CHAP. Is this a viable solution??


No. As I had said above, it's impossible.


Thanks Alan.


When I started this project it looked like all of the pieces were there. Now the next person will be able to find this thread and know about the issues.

Looks like I am going to try the IAS authentication approach and see how it works.



- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to