Re: MSCHAP

"Diego M. Vadell" <dvadell@lantech.com.ar> wrote:
> I've been thinking about this and have another question: I
> noticed that in the authorize sections there are a lot of SQL
> activity, but in the authenticate section, none.

SQL servers don't authenticate anyone.

> That's where mschap should compare the password from the network
> with the password in the SQL . Where can I tell mschap "go read the
> sql for the password"?

You don't. You list "sql" in the "authorize" section. It supplies
a password to FreeRADIUS, and the "mschap" module uses that password
to perform authentication.

> So it seems I will have to store the password in the users file. But what's
> the point of dialupadmin storing User-Password := password in Mysql?

So you don't have to put the password in the "users" file.

> What's the idea of dialupadmin?

So you can edit the user information in SQL through a nice GUI.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html