Jeff <[EMAIL PROTECTED]> wrote:
> Remote machines can use PAP, CHAP AND MS-CHAP to
> connect to Ascend Max, but freeradius is only using
> encrypted passwords stored in MySql to authenticate
> users.
Ok...
> - Are passwords passed from Ascend to MySql in
> clear-text or encrypted?
Please use clear terminology. No passwords are sent from Ascend to
MySQL. The NAS sends a RADIUS packet to FreeRADIUS. Any passwords in
that packet are encrypted. FreeRADIUS uses an SQL API to talk to
MySQL, and get the passwords stored there. As you've said the
passwords in MySQL are encrypted ("crypt"?), you already have the
answer to your question.
> - Does it depend on whether PAP, CHAP, or MS-CHAP was
> used for the initial communication w/ Ascend?
No. But there are other issues with CHAP and encrypted passwords.
See the FAQ.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
