| Gunnar Magholder 2006-03-25, 11:59 am |
|
"SyedCisco" wrote:
> Hello Everybody,
Hi there
>
> Can anybody provide me the answer for these two questions here:
I will try my best
>
> 1# How does IAS server converts the incoming chap request to mschap?
It does not convert this at all. CHAP per definition requires a storage
method with a reversible encryption because of the response that is generated
with the challenge and the password.
> 2 # AD does not support chap ...only pap/mschap?? Is it so ..Why?
So if you want to use PAP or CHAP you have to implement reversible
encryption in your active directory (per User or per Domain). Please remember
that after configuring reversible encryption you have to change the password
on that account for the settings to take effect. If you do that you can do
CHAP or PAP or SPAP, if you don't (what I would recommend) you are limited to
MS-CHAPv1 or MS-CHAPv2.
>
> Thanks ..
your welcome
>
> syed
>
>
|