Hello Troy -


As long as you are using PAP for authentication, you will have access to the decoded password, if not you won't.

Both CHAP and MS-CHAP use one-way encryption of the password, hence you will also need access to the cleartext password in your user database to be able to perform the same encryption and compare the results.

Can you send us a trace 5 debug from Radiator showing what is being received in the access requests?

regards

Hugh


On Wednesday, Mar 19, 2003, at 01:26 Australia/Melbourne, Troy Holder wrote:


We have a Cisco 3000 series VPN that we are trying to use with PPTP and
all of our users are in Kerberos (non Microsoft). We use an in house module
for our Kerberos authentication that calls decodedPassword. Is there any way
that I can get the following scenario to work?
PPTP -> VPN -> RADIUS -> Kerberos



-- ----------------------------------- | Troy Holder [EMAIL PROTECTED] | | Senior Network Engineer | | Communication Technologies | | North Carolina State University | ----------------------------------- === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.



NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening?

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to