[pptp-server] Is it possible to allow all linux users with pa ssword to access PoPToP vpn with out adding chap-secret?

[George Vieira]

Hmm yes your right... just tried it now.. obviously it's due to a security
risk involved if the passwords were convertable, then the password could be
extracted and printed....

oops sorry.

thanks,
George Vieira
Systems Manager
Citadel Computer Systems P/L


-----Original Message-----
From: Steve Langasek [mailto:vorlon at netexpress.net]
Sent: Monday, 17 December 2001 9:46 AM
To: George Vieira
Cc: 'Basha '; pptp-server at lists.schulte.org
Subject: Re: [pptp-server] Is it possible to allow all linux users with
pa ssword to access PoPToP vpn with out adding chap-secret?



On Mon, Dec 17, 2001 at 07:38:40AM +1100, George Vieira wrote:
> WHy not use the SMB authentication and use Samba's example to convert the
> /etc/passwd file to /etc/smbpasswd. Something like

> mksmbpasswd /etc/passwd > /etc/smbpasswd

> totally forgot the command but I think it was something like that..

Noting, of course, that mksmbpasswd will convert password file
/entries/, it will not convert the actual /passwords/.  So you would
still need to populate the file with NTLM-encrypted passwords.

Steve Langasek
postmodern programmer