From 43e385091a36af34e495ac8c6595bddab55665bb Mon Sep 17 00:00:00 2001 From: Michael Brown Date: Fri, 23 Feb 2024 14:15:22 +0000 Subject: [eap] Add support for the MS-CHAPv2 authentication method Add support for EAP-MSCHAPv2 (note that this is not the same as PEAP-MSCHAPv2), controllable via the build configuration option EAP_METHOD_MSCHAPV2 in config/general.h. Our model for EAP does not encompass mutual authentication: we will starting sending plaintext packets (e.g. DHCP requests) over the link even before EAP completes, and our only use for an EAP success is to mark the link as unblocked. We therefore ignore the content of the EAP-MSCHAPv2 success request (containing the MS-CHAPv2 authenticator response) and just send back an EAP-MSCHAPv2 success response, so that the EAP authenticator will complete the process and send through the real EAP success packet (which will, in turn, cause us to unblock the link). Signed-off-by: Michael Brown --- src/config/config_eap.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/config/config_eap.c') diff --git a/src/config/config_eap.c b/src/config/config_eap.c index d3fd77aa2..e18c48cae 100644 --- a/src/config/config_eap.c +++ b/src/config/config_eap.c @@ -37,3 +37,6 @@ PROVIDE_REQUIRING_SYMBOL(); #ifdef EAP_METHOD_MD5 REQUIRE_OBJECT ( eap_md5 ); #endif +#ifdef EAP_METHOD_MSCHAPV2 +REQUIRE_OBJECT ( eap_mschapv2 ); +#endif -- cgit