rlm_chap

Synopsis

This module performs CHAP authentication.

Processing Sections

authorize

When listed in the authorize section, the chap module looks for a CHAP-Password attribute in the request. If the attribute exists, and Auth-Type is not already set, the module sets Auth-Type := CHAP.

Return codes: === authenticate

When listed in the authenticate section, the chap module performs CHAP authentication.

Return codes: invalid The CHAP module was called for a request that did not contain a CHAP-Password attribute, or the CHAP-Password attribute was malformed.
: fail A Cleartext-Password was not supplied for the user.
: reject The CHAP-Password in the request does not match the one calculated from the Cleartext-Password.
: ok The CHAP-Password in the request matches the one calculated from the Cleartext-Password, and the user was successfully authenticated.

Expansions

None.

Directives

None.