Re: PAP/CHAP to same password

2004-08-09 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Sorry, wasn't intentional. Someone set CHAP to a group which was assigned to all users. I've changed the group Auth-Type := LOCAL, and everything is working now. Until someone tries to use MSCHAP. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: PAP/CHAP to same password

2004-08-08 Thread Alan DeKok
Thor Spruyt [EMAIL PROTECTED] wrote: Here's something I find rather strange: In postgresql.conf you can change the authenticate_query: authenticate_query = SELECT Value,Attribute FROM ${authcheck_table} It's old, and now deleted. Alan DeKok. - List info/subscribe/unsubscribe?

Re: PAP/CHAP to same password

2004-08-08 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Here's the debug info when PAP is requested against same password: You are forcing Auth-Type := CHAP, even when the user isn't doing CHAP. STOP IT. The server comes configured to work, and to do CHAP only when necessary. Stop breaking the server. Alan DeKok.

PAP/CHAP to same password

2004-08-07 Thread squirrel
Using FreeRadius v1.0.0-pre3 with MySQL v4.0.16. Given the password is stored in clear text, is there a way to authenticate both PAP or CHAP against the same password? In radiusd.conf, modules pap, I've tried encryption_scheme = clear, but didn't notice any difference.

Re: PAP/CHAP to same password

2004-08-07 Thread Thor Spruyt
[EMAIL PROTECTED] wrote: Using FreeRadius v1.0.0-pre3 with MySQL v4.0.16. Given the password is stored in clear text, is there a way to authenticate both PAP or CHAP against the same password? According to me, that's what it does by default. Check that the modules are enabled in radiusd.conf

Re: PAP/CHAP to same password

2004-08-07 Thread squirrel
[EMAIL PROTECTED] wrote: Using FreeRadius v1.0.0-pre3 with MySQL v4.0.16. Given the password is stored in clear text, is there a way to authenticate both PAP or CHAP against the same password? According to me, that's what it does by default. Check that the modules are enabled in

Re: PAP/CHAP to same password

2004-08-07 Thread Thor Spruyt
[EMAIL PROTECTED] wrote: Both PAP and CHAP modules are enabled in radiusd.conf. And you're right, there is no authenticate_query in sql.conf. Being in clear text, when authentication by CHAP is requested, it's fine. But when PAP is requested against the same password, I get: rlm_chap: