MSCHAP version

classic Classic list List threaded Threaded
3 messages Options
| Threaded
Open this post in threaded view
|

MSCHAP version

Users mailing list
Hi all,
  Hopefully trivial this one. Is there a way of extracting the MSCHAP version once the mschap module determines the control:Auth-Type is mschap?

e.g.
mschap: Client is using MS-CHAPv1 with NT-Password

mschap: Client is using MS-CHAPv2

I'd like to then do some stuff, possibly decline users using mschapv1 or just store that a user used v1?

Thanks
Andy


********************************************************************************************************************

This message may contain confidential information. If you are not the intended recipient please inform the
sender that you have received the message in error before deleting it.
Please do not disclose, copy or distribute information in this e-mail or take any action in relation to its contents. To do so is strictly prohibited and may be unlawful. Thank you for your co-operation.

NHSmail is the secure email and directory service available for all NHS staff in England and Scotland. NHSmail is approved for exchanging patient data and other sensitive information with NHSmail and other accredited email services.

For more information and to find out how you can switch, https://portal.nhs.net/help/joiningnhsmail

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: MSCHAP version

Alan DeKok-2


> On Nov 29, 2019, at 4:48 AM, FRANKS, Andy (SHREWSBURY AND TELFORD HOSPITAL NHS TRUST) via Freeradius-Users <[hidden email]> wrote:
>
> Hi all,
>  Hopefully trivial this one. Is there a way of extracting the MSCHAP version once the mschap module determines the control:Auth-Type is mschap?
>
> e.g.
> mschap: Client is using MS-CHAPv1 with NT-Password
>
> mschap: Client is using MS-CHAPv2
>
> I'd like to then do some stuff, possibly decline users using mschapv1 or just store that a user used v1?

  If there's an MS-CHAP-Response attribute, it's version 1.  If there's a MS-CHAP2-Response attribute, it's version 2.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

RE: MSCHAP version

Users mailing list
Ah great Alan, that'll work perfectly.
Thanks very much
Andy

-----Original Message-----
From: Freeradius-Users <freeradius-users-bounces+andy.franks1=[hidden email]> On Behalf Of Alan DeKok
Sent: 29 November 2019 12:33
To: FreeRadius users mailing list <[hidden email]>
Subject: Re: MSCHAP version



> On Nov 29, 2019, at 4:48 AM, FRANKS, Andy (SHREWSBURY AND TELFORD HOSPITAL NHS TRUST) via Freeradius-Users <[hidden email]> wrote:
>
> Hi all,
>  Hopefully trivial this one. Is there a way of extracting the MSCHAP version once the mschap module determines the control:Auth-Type is mschap?
>
> e.g.
> mschap: Client is using MS-CHAPv1 with NT-Password
>
> mschap: Client is using MS-CHAPv2
>
> I'd like to then do some stuff, possibly decline users using mschapv1 or just store that a user used v1?

  If there's an MS-CHAP-Response attribute, it's version 1.  If there's a MS-CHAP2-Response attribute, it's version 2.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


********************************************************************************************************************

This message may contain confidential information. If you are not the intended recipient please inform the
sender that you have received the message in error before deleting it.
Please do not disclose, copy or distribute information in this e-mail or take any action in relation to its contents. To do so is strictly prohibited and may be unlawful. Thank you for your co-operation.

NHSmail is the secure email and directory service available for all NHS staff in England and Scotland. NHSmail is approved for exchanging patient data and other sensitive information with NHSmail and other accredited email services.

For more information and to find out how you can switch, https://portal.nhs.net/help/joiningnhsmail


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html