xref: /openbsd-src/usr.sbin/radiusd/radiusd_eap2mschap.8 (revision 61a108c89715a919223691d2ce027a6b59eac1c4)
1.\"	$OpenBSD: radiusd_eap2mschap.8,v 1.4 2024/08/04 05:18:28 jmc Exp $
2.\"
3.\" Copyright (c) 2024 Internet Initiative Japan Inc.
4.\"
5.\" Permission to use, copy, modify, and distribute this software for any
6.\" purpose with or without fee is hereby granted, provided that the above
7.\" copyright notice and this permission notice appear in all copies.
8.\"
9.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16.\"
17.\" The following requests are required for all man pages.
18.\"
19.Dd $Mdocdate: August 4 2024 $
20.Dt RADIUSD_EAP2MSCHAP 8
21.Os
22.Sh NAME
23.Nm radiusd_eap2mschap
24.Nd provides conversion from EAP-MSCHAPv2 to MSCHAPv2
25.Sh SYNOPSIS
26.Nm radiusd_eap2mschap
27.Sh DESCRIPTION
28The
29.Nm
30module is executed by
31.Xr radiusd 8
32as an
33.Dq authentication-filter
34module to provide conversion from EAP-MSCHAPv2 authentication messages to
35MS-CHAPv2 authentication messages.
36.Sh CONFIGURATIONS
37The
38.Nm
39module supports the following configuration key and value:
40.Bl -tag -width Ds
41.It Ic chap-name Ar name
42Specify the name in CHAP.
43The default is
44.Dq radiusd .
45.El
46.Sh FILES
47.Bl -tag -width "/usr/libexec/radiusd/radiusd_eap2mschap" -compact
48.It Pa /usr/libexec/radiusd/radiusd_eap2mschap
49.Dq eap2mschap
50module executable.
51.El
52.Sh EXAMPLES
53An example showing the
54.Nm
55module providing an authentication server that supports EAP-MSCHAPv2.
56Although the
57.Xr radiusd_file 8
58module itself doesn't support any EAP methods,
59when used with the
60.Nm
61module it becomes possible to support EAP-MSCHAPv2.
62.Pp
63.Pa /etc/radiusd.conf :
64.Bd -literal -offset indent
65listen on 192.168.0.1
66client 192.168.0.0/24 {
67    secret SECRET
68}
69
70module file {
71    set path "/etc/npppd/npppd-users"
72}
73module eap2mschap
74
75authentication-filter * by eap2mschap
76authenticate * by file
77.Ed
78.Sh SEE ALSO
79.Xr authenticate 3 ,
80.Xr radiusd.conf 5 ,
81.Xr radiusd 8 ,
82.Xr radiusd_file 8
83.Sh HISTORY
84The
85.Nm
86module first appeared in
87.Ox 7.6 .
88