Does this mean that the clear text username/password can be seen from
the Internet, or would it only be clear text from firewall to Radius
server?

> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:[EMAIL PROTECTED] Behalf 
> Of Hugo van
> der Kooij
> Sent: Wednesday, January 17, 2007 2:40 PM
> To: [email protected]
> Subject: Re: [FW-1] SecureClient Radius CHAP Authentication
> 
> 
> On Wed, 17 Jan 2007, Jason Aley wrote:
> 
> > If I allow PAP authentication on the RADIUS (IAS) server I can
> > authenticate and everything is fine and dandy, however, if 
> I restrict
> > the connection to MSCHAP or MSCHAPv2, I get Access denied - wrong
> > username or password.
> >
> > has anyone got any ideas?
> 
> Don 't use it. CP does not support anything but PAP because 
> CHAP needs to 
> do a different handshake.
> 
> Hugo.
> 
> -- 
>       [EMAIL PROTECTED]       http://hvdkooij.xs4all.nl/
>           This message is using 100% recycled electrons.
> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
> 

________________________________________________________________
This e-mail message is intended solely for the person to whom it
is addressed and may contain confidential or privileged 
information.  If you have received it in error, please notify
[EMAIL PROTECTED] and destroy this e-mail and any
attachments. In addition, you must not disclose, copy, distribute
or take any action in reliance on this e-mail or any attachments.
 Any views or opinions presented in this e-mail are solely those
of the author and do not necessarily represent those of the
company. E-mail may be susceptible to data corruption, 
interception, unauthorised amendment, viruses and unforeseen
delays, and we do not accept liability for any such data
corruption, interception, unauthorised amendment, viruses and
delays or the consequences thereof.  Accordingly, this e-mail
and any attachments are opened at your own risk.
Spicers Ltd.
________________________________________________________________
Registered in England, Registration No. 425809

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to