From owner-freebsd-questions  Tue Oct 30 21: 0:18 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from InterJet.dellroad.org (adsl-63-194-81-26.dsl.snfc21.pacbell.net [63.194.81.26])
	by hub.freebsd.org (Postfix) with ESMTP
	id B05FE37B405; Tue, 30 Oct 2001 21:00:13 -0800 (PST)
Received: from arch20m.dellroad.org (arch20m.dellroad.org [10.1.1.20])
	by InterJet.dellroad.org (8.9.1a/8.9.1) with ESMTP id UAA60762;
	Tue, 30 Oct 2001 20:45:18 -0800 (PST)
Received: (from archie@localhost)
	by arch20m.dellroad.org (8.11.6/8.11.6) id f9V4jIg09404;
	Tue, 30 Oct 2001 20:45:18 -0800 (PST)
	(envelope-from archie)
From: Archie Cobbs <archie@dellroad.org>
Message-Id: <200110310445.f9V4jIg09404@arch20m.dellroad.org>
Subject: Re: pptp via mpd
In-Reply-To: <000c01c15c25$8f45dbb0$3200a8c0@mobile.stclairc.ca>
 "from Ryan Masse at Oct 23, 2001 08:48:01 pm"
To: Ryan Masse <rmasse@mastery.ca>
Date: Tue, 30 Oct 2001 20:45:18 -0800 (PST)
Cc: freebsd-net@FreeBSD.ORG,
	FreeBSD-Questions <freebsd-questions@FreeBSD.ORG>
X-Mailer: ELM [version 2.4ME+ PL82 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Ryan Masse writes:
> Is it possible to authenticate users on /etc/master.passwd or by some other
> method possibly RADIUS or an SQL table? storing the usernames and passwords
> in the mpd.secret file is redundant and insecure IMHO.

Sure it's possible, it's just not implemented yet :-)

Seriously, I don't have time to do it but it seems like
it would be a fairly easy programming project. See e.g.
libradius(3).

FYI, /etc/passwd is not compatible with MD5 CHAP because you
need the cleartext password.. nor is it compabible with
MSOFT CHAP.

A RADIUS client implementation would make the most sense..
patches welcome.

-Archie

__________________________________________________________________________
Archie Cobbs     *     Packet Design     *     http://www.packetdesign.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message