OpenBSD manual page server

NAME

radiusd_eap2mschap — provides conversion from EAP-MSCHAPv2 to MSCHAPv2

SYNOPSIS

DESCRIPTION

The radiusd_eap2mschap module is executed by radiusd(8) as an “authentication-filter” module to provide conversion from EAP-MSCHAPv2 authentication messages to MS-CHAPv2 authentication messages.

CONFIGURATIONS

The radiusd_eap2mschap module supports the following configuration key and value:

chap-name name

Specify the name in CHAP. The default is “radiusd”.

FILES

/usr/libexec/radiusd/radiusd_eap2mschap

“eap2mschap” module executable.

EXAMPLES

An example showing the radiusd_eap2mschap module providing an authentication server that supports EAP-MSCHAPv2. Although the radiusd_file(8) module itself doesn't support any EAP methods, when used with the radiusd_eap2mschap module it becomes possible to support EAP-MSCHAPv2.

/etc/radiusd.conf:

listen on 192.168.0.1
client 192.168.0.0/24 {
    secret SECRET
}

module file {
    set path "/etc/npppd/npppd-users"
}
module eap2mschap

authentication-filter * by eap2mschap
authenticate * by file

SEE ALSO

authenticate(3), radiusd.conf(5), radiusd(8), radiusd_file(8)

HISTORY

The radiusd_eap2mschap module first appeared in OpenBSD 7.6.