Re: Pptpd / MySql / MD5

2008-05-07 Thread Thibault Le Meur 

Sascha Kiefer a écrit :

Hi,

Thanks to http://wiki.freeradius.org/PopTop i can authenticate my vpn 
users

using an remote radius server using MS-CHAPv2

You're welcome ;-)

Passwords are stored in clear in the mysql database.
PopTop is responsible for the remoteip.
Everything works.
Now, is it possible?
* to use md5 passwords in db; i had this in the first place but
authentication failed
No, with MS-CHAPv2 your radius server needs either to know the NTLM-Hash 
version of your password or the plaintext version of your password. MD5 
is not supported by design.


Thibault

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Pptpd / MySql / MD5

2008-05-07 Thread Nicholas Hall 
On Wed, May 7, 2008 at 2:03 PM, Sascha Kiefer <[EMAIL PROTECTED]> wrote:

> Hi,
>
> Thanks to http://wiki.freeradius.org/PopTop i can authenticate my vpn
> users
> using an remote radius server using MS-CHAPv2
> Passwords are stored in clear in the mysql database.
> PopTop is responsible for the remoteip.
> Everything works.
> Now, is it possible?
> * to use md5 passwords in db; i had this in the first place but
> authentication failed


CHAP requires passwords to be stored in plaintext on the backend.


> * achieve the following: user A is logged in from workstation X; dont let
> him log in from workstation Y as long he is logged in from X


I believe Simultaneous-Use is what you're looking for.  Documentation on
this is included in the source.

-- 
Nicholas Hall
[EMAIL PROTECTED]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Pptpd / MySql / MD5

2008-05-07 Thread Sascha Kiefer 

Hi,

Thanks to http://wiki.freeradius.org/PopTop i can authenticate my vpn users
using an remote radius server using MS-CHAPv2
Passwords are stored in clear in the mysql database.
PopTop is responsible for the remoteip.
Everything works. 


Now, is it possible?
* to use md5 passwords in db; i had this in the first place but
authentication failed
* achieve the following: user A is logged in from workstation X; dont let
him log in from workstation Y as long he is logged in from X

Thanks for any hints.

Sascha




-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html