(ASCEND) MS-CHAP, radius authentication question

[Lasse Andersson <lasse@netcraft.se>]

Hi,

Can Ascend radius server 1.16 freeware version authenticate MS-CHAP requests
from TNT's/proxy radius ?.

Microsoft client that do dial-out always use MS-CHAP and it seems to be
no way to disable this in the client!.

So if an ISP/Telco's MAX TNT's is configured to support authentication
protocols like : PAP, CHAP and MS-CHAP the authentication type becomes MS-CHAP
when the the Microsoft client connects.

The TNT has to accept different authentication types in order to suite
different customer demands.

The TNT forward's the Microsoft client's MS-CHAP authentication request to 
proxy radius  which in turn forwards it to the right radius server (our radius
server).  Then the radius server then get an authentication request for a
MS-CHAP authentication.

We tried to use Ascend 1.16 (FreeWare version) to authenticate this MS-CHAP
requests but could not get it to work.

Probably the answer is that our software do not support MS-CHAP ?.

I have looked in the documentation for several radius software's but have
seen very very few hints about MS-CHAP support.
I have also asked around but I'm still confused, can anyone explain this or
give examples of product's to use (preferebly easy migration to).

It would be great to get the whole picture ...

(The ISP/Telco running the TNT's are not willing to force PAP authentaction
for us because it affects their other customers.)


Best Regards

Lasse Andersson




++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>