Lewis is correct. What you are calling "hashed" is CHAP, and what you are calling "cleartext" is PAP. Most ISP's RADIUS servers I've ever dealt with (including my own) use PAP. For Dialup Internet, you rarely need the level of security provided by CHAP. On top of that, most people with in-place RADIUS servers have them set up for PAP. I believe that in order to use CHAP your RADIUS needs to store the passwords differently, and this can require removing and re-adding all of the users for an existing RADIUS server (at least I know that's the case with Win2K IAS). So most people just use PAP. But the default on the TC is CHAP. To change it - do this your ARC: set ppp receive_authentication pap save all Then you should be able to authenticate without a problem. On the ARC, to test authentication without actually dialing up, enter the command: _auth username password It should come back with either Authenticated or Not and you'll know it's working. - Joel -----Original Message----- From: Kirti S. Bajwa [mailto:kbajwa@tib.com] Sent: Wednesday, January 26, 2005 4:23 PM To: 'Discussion relating to the 3Com/US Robotics Total Control modemsystems.' Subject: RE: [USR-TC] Authentication Hello List: I want to educate myself about 'cleartext password' or 'hashed password' authentication. Here is the problem: I am trying to setup a 3com NAS & a (freshly installed) RADIUS (freeRADIUS) authentication server. I tested the RADIUS server by 'radtest' and then 'NTRagPing' utility. The RADIUS server authenticates like a charm. Then I tried to dial-in to test that 3COM is doing its job. The authentication is rejected. It seems that the RADIUS server is expecting password in 'cleartext' format but is not getting them in that from 3COM. Please, help me with the following: (1) How & what format (cleartext or hashed)the passwords is passed from 3COM NAS to Radius Server? (2) Where is the setting for 'cleartext' or 'hashed' password in 3COM? Is it in HiPer NMC or HiPer ARC settings? I have read the documents for the last 3 days and have not found the answer. Thanks. Kirti _______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
participants (1)
-
Joel - Fox Computers