Re: PEAP/mschapv2 authentication options?

2004-07-30 Thread Alan DeKok
Dave Mussulman <[EMAIL PROTECTED]> wrote: > Inside, where the PEAP/MS-CHAPv2 supplied login is being verified. To authenticate EAP-MSCHAP, the server ends up calling the MSCHAP module. The MS-CHAP-Use-NTLM-Auth attribute (value yes,no) controlls whether or not the MSCHAP module uses ntlm_auth

Re: PEAP/mschapv2 authentication options?

2004-07-29 Thread Dave Mussulman
On Thu, Jul 29, 2004 at 07:16:49PM -0400, Alan DeKok wrote: > Dave Mussulman <[EMAIL PROTECTED]> wrote: > > Okay, I've done that. My authorize section looks like: > > > > authorize { > > > > preprocess > > group { > > files > > #sql > > mschap > >

Re: PEAP/mschapv2 authentication options?

2004-07-29 Thread Alan DeKok
Dave Mussulman <[EMAIL PROTECTED]> wrote: > Okay, I've done that. My authorize section looks like: > > authorize { > > preprocess > group { > files > #sql > mschap > chap > } > eap The "group" is pretty much meani

Re: PEAP/mschapv2 authentication options?

2004-07-29 Thread Dave Mussulman
On Wed, Jul 28, 2004 at 06:06:02PM -0400, Alan DeKok wrote: > Dave Mussulman <[EMAIL PROTECTED]> wrote: > > Thanks for the pointer. Knock on wood, I think I have things working. > > This project is really amazing, and it's gotten really easy to setup > > EAP. That's a big credit to its maintainer

Re: PEAP/mschapv2 authentication options?

2004-07-28 Thread Alan DeKok
Dave Mussulman <[EMAIL PROTECTED]> wrote: > Thanks for the pointer. Knock on wood, I think I have things working. > This project is really amazing, and it's gotten really easy to setup > EAP. That's a big credit to its maintainers. Thanks. I'm not sure everyone would agree on ease of use, but

Re: PEAP/mschapv2 authentication options?

2004-07-28 Thread Dave Mussulman
On Thu, Jul 22, 2004 at 05:28:52PM -0400, Alan DeKok wrote: > Dave Mussulman <[EMAIL PROTECTED]> wrote: > > My question is: what are my authentication options with mschapv2? > > Clear-text passwords, or nt passwords. > > > I believe I would prefer FreeRADIUS to authenticate off > > of our Win

Re: PEAP/mschapv2 authentication options?

2004-07-22 Thread Alan DeKok
Dave Mussulman <[EMAIL PROTECTED]> wrote: > My question is: what are my authentication options with mschapv2? Clear-text passwords, or nt passwords. > I believe I would prefer FreeRADIUS to authenticate off > of our Windows Active Directory domain, Nope. AD won't supply passwords. Use nt

PEAP/mschapv2 authentication options?

2004-07-22 Thread Dave Mussulman
I've been successful getting a Cisco Aironet 1200 AP to authentication against a pre-1.0.0 CVS build in my testbed. For testing, my users file has just had: daveUser-Password == "dave" and it worked fine. My question is: what are my authentication options with mschapv2? I believe I would p