Hi

Thanks for the reply. 

I've read about the security related problems of changing a password
over MS-CHAP and MS-CHAP v2 and saw that there are servers which are not
supporting the "change password" packet. However, some access servers
(Cisco) and RADIUS servers(IAS) do support it.

Is there any chance that FreeRADIUS will support it in the near future?

Thanks,
Gil Shai

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alan
DeKok
Sent: Monday, September 20, 2004 5:22 PM
To: [EMAIL PROTECTED]
Subject: Re: Support of MS-CHAP 

"Gil Shai" <[EMAIL PROTECTED]> wrote:
> I've noticed that freeradius 1.0 supports MS-CHAP but when I looked at

> the code, I didn't find any trace of an option to periodically change 
> the password using MS-CHAP.

  FreeRADIUS doesn't implement RADIUS "change password" packets, either.

> Does anyone know why this option is not supported in freeradius?

  There are simply too many security problems with obtaining the users
new password over a network connection.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to