Re: 802.1X - ldap AND users file

Alan DeKok via Freeradius-Users <[email protected]> Fri, 10 Apr 2026 08:59:56 -0400
Newsgroups gmane.comp.freeradius.user
Message-ID <[email protected]>
On Apr 10, 2026, at 7:50 AM, Cedric Delaunay <[email protected]> wrote:
> Unfortunately, I tried your proposals this morning with non success :

  Oh well.  :(

> That's what Brian expected :( => server is ok but client don't 
> Any other way to reach my goal ?

  Use TTLS with PAP.

  Plus, you shouldn't really be using PEAP/MS-CHAP.   Using that requires you to store clear-text passwords on disk.  Which is very bad.

  PAP is substantially more secure, despite random nonsense articles you might find on the net.  There will shortly be an RFC which explains this, and deprecates CHAP / MS-CHAP in favour of PAP.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=V2qe
-----END PGP SIGNATURE-----