Re: [Emerald] Default Grace Period (Days)

New Message Reply Date view Thread view Subject view Author view
Dale E. Reed Jr. (daler@iea-software.com)
Tue, 9 Apr 2002 13:37:09 -0700



Message-ID: <054701c1e006$52ad76d0$d100000a@ash>
From: "Dale E. Reed Jr." <daler@iea-software.com>
Subject: Re: [Emerald] Default Grace Period (Days)
Date: Tue, 9 Apr 2002 13:37:09 -0700

> Tried the password replace option and gibberish passwords were being
> inserted. Judging from the console of radius in -x6 mode, the gibberish is
> in fact coming from the NAS. In some cases, the user supplied password is
> *CHAP* (MaxTNT NAS)
>
> Usually I'd suspect the NAS secret in the Radius config, but there are
tons
> of users authenticating properly so I'm at a loss.

Password replace doesn't work with CHAP authentication, since the user's
password is already encrypted and we can't de-crypt it to get the original
password. You'd need to configure your gear to use only PAP during
the password replace phase.

Dale

.



New Message Reply Date view Thread view Subject view Author view
This archive was generated on Tue Apr 09 2002 - 13:34:12 Pacific Daylight Time