Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) user passwords in radius file (fwd)
On Sun, May 03, 1998 at 10:14:35AM -0700, Terrelle Shaw wrote:
> Which does win95 DUN's use by default? I have also noticed like 2 years ago,
> when we first started, that when we used the UNIX password file to store
> passwords, some users where not able to get logged on. At that time most where
> using a version of IE3.x that we supplied with the administration kit. For some
> reason ( i believe) that it was using CHAP. At the time we had users with
> varied different ways of dialing up so we choose to settle with plain text
> passwords in the radius file. Now we use the Netscape Client Customerzation kit.
> Anyone knows what authentication scheme it uses? I would REALLY like to switch
> to pap only...And if any knows how to make Win95 DUN to use either PAP or Chap,
> if its by default one of the other..
Win95 (or any client) when adhering to the written standards will use
CHAP if you announce that you want CHAP, else it will use PAP. The
problem is that you _must not_ set Recv Auth=CHAP or Either but only
PAP in order to force Win95 to use PAP. If it is the only available
auth, a client must use it. If you announce CHAP before PAP, a decent
client will utilize CHAP (but could fallback to CHAP). Fallback, however,
is typically only used when CHAP is not implemented or the user has
configured the client not to use CHAP. There is this "use encrypted
password" checkbox in DUN, but I DUNno whether that one forces DUN to
fallback to PAP even if the NAS announces CHAP or whether it forbids
(if checked) the client to use PAP at all.
Note that a CHAP->PAP fallback is _never_ tried if CHAP has been
negotiated and failed. That would be nonsense anyway.
--
Kanther-Line: PGP SSH IDEA MD5 GOST RIPE-MD160 3DES RSA FEAL32 RC4
+-o-+--------------------------------------------------------+-o-+
| o | \\\- Brain Inside -/// | o |
| o | ^^^^^^^^^^^^^^ | o |
| o | Andre' Beck (ABPSoft) AB10-RIPE XLink PoP Dresden | o |
+-o-+--------------------------------------------------------+-o-+
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
References: