On 18/06/12 10:06, Adrian Czapek wrote:
2012/6/18 Alan DeKok <al...@deployingradius.com <mailto:al...@deployingradius.com>>Change the supplicant to use EAP-GTC. That might work. Otherwise, it's impossible. Thanks, just found this: http://fuhry.us/blog/2012/01/01/mschapv2-against-mit-kerberos-yes-you-can/ but that requires to patch kerberos which probably I won't be allowed to do.
Important note for the archive: this only works if you are using MIT Kerberos as your KDC, and can patch your KDC. It does NOT work for Active Directory.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
