(RADIATOR) AuthBy EXTERNAL and MPPE keys

Vlad Shalnev vlad at asv.ru
Fri Jul 22 01:41:09 CDT 2005


Hello,

I use AuthBy EXTRNAL method ( c program ) for MS-CHAP V1, V2 authentication and 
need to generate MPPE keys. In documentation I found two way to do it: 
AutoMPPEKeys or MS-CHAP-MPPE-keys for V1 or MS-MPPE-Send-Key, MS-MPPE-Recv-Key 
for V2.

First way

AutoMPPEKeys option seems not work for me because I don't see any MPPE key 
attributes in Access-Accept packet in radiator log file.

Second way

I add to radiator conf file this lines
         AddToReply \
                  MS-CHAP-MPPE-Keys = mymppekey,\
                  MS-MPPE-Send-Key = mysendkey,\
                  MS-MPPE-Recv-Key = myrecvkey,\
                  MS-MPPE-Encryption-Policy = Encryption-Allowed,\
                  MS-MPPE-Encryption-Types = Encryption-Any

And I see in Access-Accept packet
         MS-CHAP2-Success = "<1>S=8CEE3ECDA500832910AEF9CEC3735680D9EDC4EC"
         MS-CHAP-MPPE-Keys = ""
         MS-MPPE-Send-Key =
         MS-MPPE-Recv-Key =
         MS-MPPE-Encryption-Policy = Encryption-Allowed
         MS-MPPE-Encryption-Types = Encryption-Any

Is it right ?

Are there other methods for MPPE key generating with AuthBy EXTERNAL ?

I am using Radiator V3.11 on Solaris 9.

Thanks for any help

-- 
--------------------------------------------------------------------------------
Vlad A. Shalnev
E-mail: vlad at asv.ru

"Gravity can't be blamed
         for someone
                 falling in love"

                         ( Albert Einstein )

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list