Subject: RE: I've got PAP working, now PPP CHAP mode...
To: 'ciccio' <ciccio@milagro.dirac.es>
From: John Maier <johnam@beta.datastorm.com>
List: netbsd-help
Date: 05/06/1996 08:28:11
Never mind I figured it out. =20
PAP is a dual key authintication system, i.e. username, password, but =
the data is unencrypted.
CHAP is a dual key authintication system, i.e. no username, just a =
password, in this case the data is encrypted. Since there is just one =
piece of data, using the system username/password authintication doesn't =
seem possible.
After reviewing the two authintication systems, I am more inclined to =
stay with PAP, it is easier to administer at track.
jam
----------
From: ciccio[SMTP:ciccio@milagro.dirac.es]
Sent: Saturday, May 04, 1996 6:21 AM
To: John Maier
Subject: Re: I've got PAP working, now PPP CHAP mode...
>=20
> I have got PPP to operate with PAP authentication. I set my =
/etc/ppp/pap-secrets to use the system login list like this...
> pppserver:/etc/ppp>cat pap-secrets
> * * ""
>=20
> Now how do I setup PPP for CHAP to use this type of authenitcation? =
Can copy the pap-secrets to chap-secrets? Are there other pitfalls?
>=20
> jam
>=20
I never tried it, but it should work; in both cases, encryptation and
referecing another file holding the secret could be a security feature.
ciccio