Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 Jun 1998 12:50:31 +0200
From:      Andreas Klemm <aklemm@hightek.com>
To:        IBS / Andre Oppermann <andre@pipeline.ch>
Cc:        isp@FreeBSD.ORG
Subject:   Re: how does PPP CHAP work ?
Message-ID:  <19980608125031.00463@hightek.com>
In-Reply-To: <357BB8B1.55C43D5@pipeline.ch>; from IBS / Andre Oppermann on Mon, Jun 08, 1998 at 12:10:57PM %2B0200
References:  <19980608115605.21479@hightek.com> <357BB8B1.55C43D5@pipeline.ch>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jun 08, 1998 at 12:10:57PM +0200, IBS / Andre Oppermann wrote:
> Andreas Klemm wrote:
> No. You have two problems:

Three ? ;-)

> 1. PAP passwords are in clear text
> 
> 2. CHAP is not CHAP, there is one CHAP standard and MS-CHAP
>    Please read the discussion in Brians newest userland-ppp
> 
> 3. CHAP passwords need special handling on the RADIUS server
>    (Challenge Handshake Auth Protocol)

Which special handling on the Radius Server ? Could you please
be more verbose on this ?

> > A collegue of mine claims, that it would'nt be possible, because
> > CHAP would use a two way handshake, that means, our access router
> > would have to authenticate itself with username and password on
> > the client access router.
> 
> No, that depends on your configuration.

On the access server or radius or both ?

-- 
B&K Gruppe - Wuppertal                                    <aklemm@hightek.com>
phone +49 202 7399 - 170                                 <andreas@FreeBSD.ORG>
fax   +49 202 7399 - 100                      http://www.FreeBSD.ORG/~andreas/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980608125031.00463>