RE: Freeradius and Active directory (An aside)

2008-05-20 Thread Dean, Barry
Alan DeKok said: It is impossible to use CHAP to authenticate to AD. You MUST use MS-CHAP, or PAP. When testing my Radius server with AD and XSupplicant I found that EAP-TTLS with MD5 inner auth and EAP-MD5 as well as EAP-TTLS with CHAP inner auth all failed. So you have explained why

Re: Freeradius and Active directory (An aside)

2008-05-20 Thread Nicolas Goutte
Am 20.05.2008 um 16:05 schrieb Dean, Barry: Alan DeKok said: It is impossible to use CHAP to authenticate to AD. You MUST use MS-CHAP, or PAP. When testing my Radius server with AD and XSupplicant I found that EAP-TTLS with MD5 inner auth and EAP-MD5 as well as EAP-TTLS with CHAP

Re: Freeradius and Active directory (An aside)

2008-05-20 Thread Arran Cudbard-Bell
Dean, Barry wrote: Alan DeKok said: It is impossible to use CHAP to authenticate to AD. You MUST use MS-CHAP, or PAP. When testing my Radius server with AD and XSupplicant I found that EAP-TTLS with MD5 inner auth and EAP-MD5 as well as EAP-TTLS with CHAP inner auth all failed.

Re: Freeradius and Active directory (An aside)

2008-05-20 Thread Arran Cudbard-Bell
Nicolas Goutte wrote: Am 20.05.2008 um 16:05 schrieb Dean, Barry: Alan DeKok said: It is impossible to use CHAP to authenticate to AD. You MUST use MS-CHAP, or PAP. When testing my Radius server with AD and XSupplicant I found that EAP-TTLS with MD5 inner auth and EAP-MD5 as well as

Re: Freeradius and Active directory (An aside)

2008-05-20 Thread Nicolas Goutte
Am 20.05.2008 um 16:20 schrieb Arran Cudbard-Bell: Dean, Barry wrote: Alan DeKok said: It is impossible to use CHAP to authenticate to AD. You MUST use MS-CHAP, or PAP. When testing my Radius server with AD and XSupplicant I found that EAP-TTLS with MD5 inner auth and EAP-MD5 as