RADIUSD_EAP2MSCHAP(8) | System Manager's Manual | RADIUSD_EAP2MSCHAP(8)

# NAME

`radiusd_eap2mschap` — provides conversion from EAP-MSCHAPv2 to MSCHAPv2

# SYNOPSIS

`radiusd_eap2mschap` |

# DESCRIPTION

The `radiusd_eap2mschap` module is executed by radiusd(8) as an “authentication-filter” module to provide conversion from EAP-MSCHAPv2 authentication messages to MS-CHAPv2 authentication messages.

# CONFIGURATIONS

The `radiusd_eap2mschap` module supports the following configuration key and value:

`chap-name` name
  Specify the name in CHAP. The default is “radiusd”.

# FILES

/usr/libexec/radiusd/radiusd_eap2mschap
  “eap2mschap” module executable.

# EXAMPLES

An example showing the `radiusd_eap2mschap` module providing an authentication server that supports EAP-MSCHAPv2. Although the radiusd_file(8) module itself doesn't support any EAP methods, when used with the `radiusd_eap2mschap` module it becomes possible to support EAP-MSCHAPv2.

/etc/radiusd.conf:

    listen on 192.168.0.1
    client 192.168.0.0/24 {
        secret SECRET
    }

    module file {
        set path "/etc/npppd/npppd-users"
    }
    module eap2mschap

    authentication-filter * by eap2mschap
    authenticate * by file

# SEE ALSO

authenticate(3), radiusd.conf(5), radiusd(8), radiusd_file(8)

# HISTORY

The `radiusd_eap2mschap` module first appeared in OpenBSD 7.6.

August 4, 2024 | Debian