[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: freeradius radclient MSCHAPv2 command string
From:       Phil Mayers <p.mayers () imperial ! ac ! uk>
Date:       2014-06-23 15:57:31
Message-ID: 53A84E6B.20308 () imperial ! ac ! uk
[Download RAW message or body]

On 23/06/14 16:46, Stephen Nichols wrote:
> Hi,
>
> I want to use radclient to access radius server using MSCHAPv2.  Using
> freeradius version 2.1.12 on CentOS and 2.2.3 on our own Linux server.
> I have used the following string to successfully authenticate using
> MSCHAPv1.
>
> Echo ‘User-Name = User1,MS-CHAP-Password =mypassword,NAS-IP-Address
> =172.21.100.131,NAS-Port-Type=15,NAS-Port=1’ | radclient –X 172.21.20.50
> auth testing123
>
> Searched around and checked radclient –h, but found no information
> regarding format for an MSCHAPv2 command string.

I believe radclient can't do MSCHAPv2.

You can "fake" it by capturing an MSCHAPv2 auth and replaying it (this 
does not work for EAP-MSCHAPv2). We use this for our Nagios checks.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[prev in list] [next in list] [prev in thread] [next in thread]