Re: RadiusNT 2.22.41: Strange PAP/CHAP and NT problem

Dale E. Reed Jr. ( (no email) )
Wed, 04 Feb 1998 14:52:09 -0800

Darryl Ackernecht wrote:
>
> I don't really understand why this would make a difference? Also, I'm not
> sure if it is that big of problem using PAP - doesn't radius perform
> encryption between the client and server?

In order to authenticate against the NT SAM, RadiusNT has to have the
clear-text password to pass to the NT API. With CHAP, we don't have that
and therefore can not authenticate against the NT SAM. This same issue
is common on UNIX machines when you try to CHAP auth against a passwd
file: it simply can't be done.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com