<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
clear text password should be possible with peap and leap .... <br>
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<div style="display: inline-block;" id="gt-input-tool">
<div id="itamenu"><span class="ita-kd-inputtools-div"></span></div>
</div>
<div id="gt-src-c" class="g-unit">
<div id="gt-src-p">
<div id="select_document"><br>
</div>
</div>
</div>
<div id="gt-res-c" class="g-unit">
<div id="gt-res-p">
<div id="gt-res-data">
<div id="gt-res-wrap">
<div id="gt-res-content" class="almost_half_cell">
<div dir="ltr" style="zoom:1">
<div id="tts_button"><object
type="application/x-shockwave-flash"
data="//ssl.gstatic.com/translate/sound_player2.swf"
id="tts" width="18" height="18"></object></div>
<span id="result_box" class="short_text" lang="en"><span
class="hps">I brought</span> <span class="hps">it
to work</span></span> with freeradius - ldap <br>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<a class="moz-txt-link-freetext" href="http://deployingradius.com/documents/protocols/compatibility.html">http://deployingradius.com/documents/protocols/compatibility.html</a><br>
<br>
<br>
<div class="moz-cite-prefix">Am 22.02.15 um 19:31 schrieb Alexey
Beketov:<br>
</div>
<blockquote cite="mid:1424629889.827222812@f424.i.mail.ru"
type="cite">
<p>Hello,</p>
<p>I'm trying to make strongswan authorize and authenticate
against freeipa through eap-radius. Client is my android phone
and strongswan app (I'd like to use MOBIKE). <br>
I've sucessfully configured freeradius to query freeipa via ldap
protocol.<br>
After some playing I've figured out that freeipa stores
passwords in ssha hash. So to got everything work freeradius
needs passwords in clear-text or ssha.<br>
The only way I got IPSEC to work on my phone is using xauth +
psk and native android vpn client. But that way is using ikev1
and thus I can't use MOBIKE.<br>
My question: Is there any way to use eap-radius and ssha
passwords to get ikev2 support?<br>
May be it is possible to pass clear-text passwords using
eap-radius?</p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a></pre>
</blockquote>
<br>
</body>
</html>