John Horne <[EMAIL PROTECTED]> wrote:
> As can be seen it says 'Login OK' but seems to be missing the:
> 
>     Sending Access-Accept of id 209 to 127.0.0.1:40603
>         MS-CHAP2-Success =
> 0x01533d36364635423233344331414344363438463746353946443832353834324437424131433645464332

  Ah, yes.  For that, the server needs access to the user's password.

  Since you want it to authenticate *anyone* using MS-CHAP, you'll
need to supply all the server with all of their passwords.  In which
case, you might as well let the MSCHAP module just authenticate them
normally.

  MS-CHAPv2 is two-way authentication.  There's no way to get around
that.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to