advertisement

Article:
  A Technical Comparison of TTLS and PEAP
Subject:   Clarifications
Date:   2003-05-16 14:39:46
From:   anonymous2
Response to: Clarifications

Hmmm... MSCHAPv2 which requires a database that supports MSCHAPv2 or passwords stored in plain-text. Therefore no authenticating PEAP to LDAP or SQL(unless sql database supports MSCHAPv2). That alone gives the edge to TTLS. There's a free TTLS client for W2k/XP from http://www.alfa-ariss.com
Main Topics Oldest First

Showing messages 1 through 1 of 1.

  • Clarifications
    2003-06-13 12:48:08  anonymous2 [Reply | View]

    The information seems technically incorrect.

    MSCHAP does not require passwords stored in plain-text; and this is considered one of the many advantages of MSCHAP compared to CHAP. CHAP requires the password to be stored in plain-text.

    MSCHAP protocol can be used with SQL. A number of RADIUS servers support PPP-MSCHAP with SQL.

    If there is indeed a real demand for SQL with MSCHAPv2, then it maybe just a question of time before RADIUS vendors support it.