Simon Bond <[EMAIL PROTECTED]> wrote: > I was hoping to use the Proxy feature of FreeRadius to take the > authentication request from the Draytek (MS-CHAP) and pass it on to > the RSA ACE/Server (PAP),
You can't. It's impossible. > As a complete aside (and not high on my list), I was able to compile > 0.9.3 OK, but couldn't compile 1.0.0pre1 at all - failed whilst > compiling md4.c. Is this a common fault? I've not spotted anything on > the lists about this. It was a last-minute change, which has since been fixed. > If this fails, I do know that I can use Funk Proxy because it will > take the MS-CHAP RADIUS request and forward that as a SecurID > (UDP/5500) request to the ACE/Server. I'd rather use open source > software though as I prefer the open development model (and would hope > to contribute back one day). If you can figure out how the Funk server does that (i.e. what protocol it uses), then FreeRADIUS can be made to do the same thing. Also, try checking SecurID's command-line tools. They may have something which takes MS-CHAP, and does their authentication. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
