[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    RE: Need examples for MSCHAPV2Authenticator
From:       "Wang, Yu" <ywang10 () fsu ! edu>
Date:       2013-07-26 13:23:57
Message-ID: 712E6E5D87B90E4E833ADC4B96D9C9A326839D04 () FSU-EXCH-NWR01 ! fsu ! edu
[Download RAW message or body]

> 1. I am in the process of updating my existing JRadius client to use \
> MSCHAPV2Authenticator. Is there a document or example that explains on how to send \
> the hashed passwords between Radius client and server using this authenticator?

We use Samba Winbind.
Check this link: http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOWTO/c3661f0a43b3f36eb9a1cda7b719d8349c9d13dd


> 2. As per Wiki, it seems to be mandatory to mention CA issued certificates.
> Is there an example that uses certificates for mutual authentication?

The same link has an example for it too (under EAP tls clause).

> 3. Based on different authenticators available in JRadius, MSCHAPV2 seems to be the \
> strongest authentication possible. Is that understanding fair?
MSCHAPV2 is not strong. But you have TLS tunnel established so it should be ok.

https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/


Yu Wang


-----Original Message-----
From: freeradius-users-bounces+ywang10=fsu.edu@lists.freeradius.org \
[mailto:freeradius-users-bounces+ywang10=fsu.edu@lists.freeradius.org] On Behalf Of \
                Rama Krishna
Sent: Thursday, July 25, 2013 6:12 PM
To: freeradius-users@lists.freeradius.org
Subject: Need examples for MSCHAPV2Authenticator

Already sent this email to David Bird, author of MSCHAPV2Authenticator of JRadius \
client and waiting for the reply. Just sharing the same with mailing group so that I \
can receive response from at least one of folks if not David.  
Here are my 3 questions.

Thanks,
Rama

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]