Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 22 Jun 2020 09:23:17 -0400
From:      "Derek (freebsd lists)" <482254ac@razorfever.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: CHAP using /etc/passwd
Message-ID:  <3cdfae7c-9478-42e3-5fed-7da3376416ce@chezmarcotte.ca>
In-Reply-To: <20200621172318.GA12664@doctor.nl2k.ab.ca>
References:  <20200621172318.GA12664@doctor.nl2k.ab.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2020-06-21 1:23 p.m., The Doctor via freebsd-questions wrote:
> Is there a way to use CHAP plugged into /etc/passwd?
> 

"CHAP requires that both the client and server know the plaintext of the 
secret."

/etc/(master.)passwd uses a one-way password hash.  The server cannot 
know the secret.  You'll need a separate database.

It might be possible to use a pam module to use either CHAP directly, or 
reference whatever second database you have, so you still only have one 
set of passwords.  I have no specific suggestions here though.

Derek



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3cdfae7c-9478-42e3-5fed-7da3376416ce>