Proxy RADIUS from MSCHAPv1 to MSCHAPv2

2008-02-23 Thread Franco Pieressa
Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server that ONLY support MSCHAPv2. Can I proxy RADIUS packets through FreeRADIUS and convert MSCHAPv1 -- MSCHAPv2? To be more specific,

Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

2008-02-23 Thread Alan DeKok
Franco Pieressa wrote: Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server that ONLY support MSCHAPv2. This doesn't appear to have anything to do with FreeRADIUS. Can I proxy

RE: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

2008-02-23 Thread Franco Pieressa
PROTECTED] To: freeradius-users@lists.freeradius.org Subject: Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2 Franco Pieressa wrote: Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server

Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

2008-02-23 Thread Alan DeKok
Franco Pieressa wrote: I can't upgrade the NAS nor the RADIUS server :-( I would suggest trying *really* hard. It's a lot easier to upgrade than to do the impossible. What I need to know, is if it's theorically possible to translate the MSCHAPv1 authentication to a MSCHAPv2 authentication?