<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    clear text password should be possible with peap and leap .... <br>
    <meta http-equiv="content-type" content="text/html;
      charset=windows-1252">
    <div style="display: inline-block;" id="gt-input-tool">
      <div id="itamenu"><span class="ita-kd-inputtools-div"></span></div>
    </div>
    <div id="gt-src-c" class="g-unit">
      <div id="gt-src-p">
        <div id="select_document"><br>
        </div>
      </div>
    </div>
    <div id="gt-res-c" class="g-unit">
      <div id="gt-res-p">
        <div id="gt-res-data">
          <div id="gt-res-wrap">
            <div id="gt-res-content" class="almost_half_cell">
              <div dir="ltr" style="zoom:1">
                <div id="tts_button"><object
                    type="application/x-shockwave-flash"
                    data="//ssl.gstatic.com/translate/sound_player2.swf"
                    id="tts" width="18" height="18"></object></div>
                <span id="result_box" class="short_text" lang="en"><span
                    class="hps">I brought</span> <span class="hps">it
                    to work</span></span> with  freeradius - ldap <br>
              </div>
            </div>
          </div>
        </div>
      </div>
    </div>
    <br>
    <a class="moz-txt-link-freetext" href="http://deployingradius.com/documents/protocols/compatibility.html">http://deployingradius.com/documents/protocols/compatibility.html</a><br>
    <br>
    <br>
    <div class="moz-cite-prefix">Am 22.02.15 um 19:31 schrieb Alexey
      Beketov:<br>
    </div>
    <blockquote cite="mid:1424629889.827222812@f424.i.mail.ru"
      type="cite">
      <p>Hello,</p>
      <p>I'm trying to make strongswan authorize and authenticate
        against freeipa through eap-radius. Client is my android phone
        and strongswan app (I'd like to use MOBIKE). <br>
        I've sucessfully configured freeradius to query freeipa via ldap
        protocol.<br>
        After some playing I've figured out that freeipa stores
        passwords in ssha hash. So to got everything work freeradius
        needs passwords in clear-text or ssha.<br>
        The only way I got IPSEC to work on my phone is using xauth +
        psk and native android vpn client. But that way is using ikev1
        and thus I can't use MOBIKE.<br>
        My question: Is there any way to use eap-radius and ssha
        passwords to get ikev2 support?<br>
        May be it is possible to pass clear-text passwords using
        eap-radius?</p>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a></pre>
    </blockquote>
    <br>
  </body>
</html>