From 26efe79ce312ab474d783980c0965031a5e8445d Mon Sep 17 00:00:00 2001 From: Kozlov Dmitry Date: Tue, 20 Nov 2012 15:28:06 +0400 Subject: chap-secrets: implemented encryption --- README | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'README') diff --git a/README b/README index fe2f5f73..450ba857 100644 --- a/README +++ b/README @@ -153,6 +153,15 @@ snmpset -m +ACCEL-PPP-MIB -v 2c -c local 127.0.0.1 ACCEL-PPP-MIB::termByUsername snmpset -m +ACCEL-PPP-MIB -v 2c -c local 127.0.0.1 ACCEL-PPP-MIB::cli.0 = "shaper change all 1024 temp" +chap-secrets encryption +----------------------- +To enable chap-secrets encryption ablity accel-ppp must be compiled with -DCRYPTO=OPENSSL (which is default). +Username field may be kept as cleartext or hashed through some hash chain. To specify hash chain use username-hash option. +For example, username-hash=md5,sha1 means hash username through md5 and then binary result hash through sha1. +Username have to be specified as hexadecimal dump of digest result. +Password field have to be encrypted using smbencrypt (NT Hash part). +Encryption is incompatible with auth_chap_md5 module. + Warning !!! ----------- -- cgit v1.2.3