Message-ID: <054701c1e006$52ad76d0$d100000a@ash> From: "Dale E. Reed Jr." <daler@iea-software.com> Subject: Re: [Emerald] Default Grace Period (Days) Date: Tue, 9 Apr 2002 13:37:09 -0700
> Tried the password replace option and gibberish passwords were being
> inserted. Judging from the console of radius in -x6 mode, the gibberish is
> in fact coming from the NAS. In some cases, the user supplied password is
> *CHAP* (MaxTNT NAS)
>
> Usually I'd suspect the NAS secret in the Radius config, but there are
tons
> of users authenticating properly so I'm at a loss.
Password replace doesn't work with CHAP authentication, since the user's
password is already encrypted and we can't de-crypt it to get the original
password. You'd need to configure your gear to use only PAP during
the password replace phase.
Dale
.