I’ve integrated our Digipass two-factor authentication into an OpenRADIUS server, which works extremely well with authenticating users with PAP and a MT hotspot. I’m not worried about someone sniffing password data, since the password expires every 38 seconds and authentication traffic occurs on a different subnet.
Now I would like to authenticate users who PPTP in, but it seems the AAA only sends CHAP requests. Is there a way to force AAA to use PAP instead of CHAP?
Thanks!