RE: ppp authentication without sending the password

From: Jihene Bouraoui (BouraouiJ@globalknowledge.net)
Date: Wed Sep 18 2002 - 09:36:04 GMT-3


in fact, I need not to send a password at all, no hash, nothing, just
authentication through username, I tried to configure a username without
passwd and it works,
thanks
-----Original Message-----
From: Craig Tompkins
To: 'Senthil Kumar'; 'Jihene Bouraoui'; 'Ccielab (E-mail) '
Sent: 18/09/2002 14:38
Subject: RE: ppp authentication without sending the password

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Use CHAP. Read Below.

Introduction
Point-to-Point Protocol (PPP) currently supports two authentication
protocols: Password Authentication Protocol (PAP) and Challenge
Handshake Authentication Protocol (CHAP). Both are specified in RFC
1334 and are supported on synchronous and asynchronous interfaces.

PAP provides a simple method for a remote node to establish its
identity using a two-way handshake. After the PPP link establishment
phase is complete, a username and password pair is repeatedly sent by
the remote node across the link (in clear text) until authentication
is acknowledged, or until the connection is terminated.

PAP is not a secure authentication protocol. Passwords are sent
across the link in clear text and there is no protection from
playback or trail-and-error attacks. The remote node is in control of
the frequency and timing of the login attempts.

CHAP is considered to be more secure because the user password is
never sent across the connection. For more information on CHAP refer
to the document PPP Authentication Using the ppp chap hostname and
ppp authentication chap callin Commands.

Craig W. Tompkins
Network Engineer
Temecula, CA 92592
760.583.6544

- -----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of Senthil Kumar
Sent: Wednesday, September 18, 2002 4:55 AM
To: Jihene Bouraoui; 'Ccielab (E-mail) '
Subject: RE: ppp authentication without sending the password

YOU MIGHT TRY CREATING A USER WITH NO PASSWORD..THIS MIGHT WORK, NOT
SURE IF
THIS IS RIGHT THOUGH..

- -----Original Message-----
From: Jihene Bouraoui [mailto:BouraouiJ@globalknowledge.net]
Sent: 18 September 2002 11:44
To: 'Ccielab (E-mail) '
Subject: ppp authentication without sending the password

Hi,

can anyone tell me how to configure this please? I have my lab within
a
week!!!
thanks



This archive was generated by hypermail 2.1.4 : Mon Oct 07 2002 - 07:43:55 GMT-3