ppp icon indicating copy to clipboard operation
ppp copied to clipboard

Add support for PEAP?

Open amosshapira opened this issue 9 years ago • 9 comments

jumpcloud.com, an 'LDAP as a Service' and 'RADIUS as a Service' provider, tells me that they only support PEAP (https://en.wikipedia.org/wiki/Protected_Extensible_Authentication_Protocol) to let me use RADIUS to authenticate VPN users.

Would it be possible to add support for this to pppd?

Thanks.

amosshapira avatar Aug 04 '16 23:08 amosshapira

Hi, PEAP is implemented by this patch https://github.com/rustylife/peap It would be awesome if ppp devs include it in one of the future releases.

xensystems avatar Jan 23 '18 21:01 xensystems

https://github.com/paulusmack/ppp/pull/128

rustylife avatar Jan 07 '20 00:01 rustylife

@rustylife: Please look your PR, it has not been merged. Thanks in advance.

Neustradamus avatar Nov 09 '20 01:11 Neustradamus

@rustylife: Please look your PR, it has not been merged... Can you look comments... Thanks in advance.

Neustradamus avatar Mar 08 '21 01:03 Neustradamus

#307 Would fix this

enaess avatar Aug 03 '21 20:08 enaess

We should be able to close this. @paulusmack ?

enaess avatar Oct 16 '21 04:10 enaess

Are there any docs on PEAP-MSCHAPv2? I'm trying to set up l2tp connection with peap, eap-mschapv2 without any cert checks, but I get:

pppd[2485530]: rcvd [EAP Request id=0x1 PEAP 20]
pppd[2485530]: Setting max protocol version to 0x303
pppd[2485530]: Cannot load verify locations
pppd[2485530]: Could not set CA verify locations

Its hard to google any data on this new feature...

Unb0rn avatar Jul 22 '22 12:07 Unb0rn

Pppd with PEAP support isn't released yet. You would have to compile it from source (+recompile any dependent software). This isn't an easy task ...

As far as documentation goes, it should be pretty much the same options as setting up EAP-TLS. Though, you only need a CA certificate to validate the peer if I remember correctly.

enaess avatar Jul 22 '22 14:07 enaess

This issue should be closed, @paulusmack ?

enaess avatar Jul 22 '22 18:07 enaess