Lai Fu Keung wrote: > Hi, > > My users said the VPN login failed with their Windows Vista. > > I enabled freeradius debug. I came across an authentication method, > md5chap in debug output that my freeradius is currently not configured
Do you mean "mschap"? > to support. If the user unselects "Require Data Encryption" in VPN. It > then works fine. It uses PAP and sends the password in plaintext (bad idea). Windows has always done that, back to win95. > > Can anyone confirm the following questions for me? > > 1. Is it that Vista uses md5chap for VPN authentication with "Data > Encryption"? Windows has always done that. > 2. Can freeradius be configured to support md5chap? Yes > > I don't get a lot of information about md5chap in google. I appreciate That's because there's no such thing - as I said, I think you mean "mschap" (or "MSCHAP" or "MS-CHAP" whichever they've called it). I don't have a vista box handy, I'll fire up a VM and take a look in a bit. > any pointers on this subject and how freeradius can be made to support > it, as radiusd.conf seems no mentioning on this subject. > > Thanks. > > Lai > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html