On 31-Jan-2003 at 16:06:22 3APA3A wrote: > Can you send FreeRADIUS logs for the session which was started with MPPE > but without MS-MPPE-Encryption-Policy/MS-MPPE-Encryption-Types? > Apologies, my mistake.
The users listed in the 'users' file DO have the MPPE encryption and types keys added as the code indicates. The DEFAULT entry does not do mschap authentication but goes off to the realms/proxy server stuff which is configured to authenticate a user by using a Microsoft IAS server. It is those entries which do not have the MPPE encryption/types added to the reply. However that is expected since it is not the mschap module doing the authentication. Hence for it all to work nicely, specific users in the 'users' file do not need to have the MPPE encryption/types added to their reply, but the DEFAULT entry does. Sorry for the hassle, but I'm glad the solution was nice and easy :-) John. ------------------------------------------------------------------------ John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] PGP key available from public key servers - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
