On Wed, Nov 13, 2002 at 03:58:48PM -0500, Alan DeKok wrote:
> Miriam Benham <[EMAIL PROTECTED]> wrote:
> > PAP works great with my existing NT domain authentication configuration,
> > but if I use CHAP it fails. I've read that I have to create users
> > credentials on the freeradius server if I want to use CHAP.

>   That's not true.  PAP is fine.

>   As for why CHAP fails, see the FAQ.  The problem with SMB
> authentication is exactly the same as for Unix authentication against
> /etc/passwd

Unless you're doing MS-CHAP.  Then you only have implementation obstacles
to overcome, rather than matters of mathematical certainty. :)

-- 
Steve Langasek
postmodern programmer

Attachment: msg10996/pgp00000.pgp
Description: PGP signature

Reply via email to