(RADIATOR) PPTP problem.

[Hugh Irvine]

Hello Troy -

As long as you are using PAP for authentication, you will have access 
to the decoded password, if not you won't.

Both CHAP and MS-CHAP use one-way encryption of the password, hence you 
will also need access to the cleartext password in your user database 
to be able to perform the same encryption and compare the results.

Can you send us a trace 5 debug from Radiator showing what is being 
received in the access requests?

regards

Hugh


On Wednesday, Mar 19, 2003, at 01:26 Australia/Melbourne, Troy Holder 
wrote:

> We have a Cisco 3000 series VPN that we are trying to use with PPTP and
> all of our users are in Kerberos (non Microsoft). We use an in house 
> module
> for our Kerberos authentication that calls decodedPassword. Is there 
> any way
> that I can get the following scenario to work?
> 	PPTP -> VPN -> RADIUS -> Kerberos
>
>
> -- 
> -----------------------------------
> | Troy Holder    troy at ncstate.net |
> |     Senior Network Engineer     |
> |   Communication Technologies    |
> | North Carolina State University |
> -----------------------------------
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.