radiusd_eap2mschap(8)

radiusd_eap2mschap8

Provides conversion from eap-mschapv2 to mschapv2

Usage

radiusd_eap2mschap

Overview

The radiusd_eap2mschap module is executed by radiusd(8) as an “authentication-filter” module to provide conversion from EAP-MSCHAPv2 authentication messages to MS-CHAPv2 authentication messages.

Configurations

The radiusd_eap2mschap module supports the following configuration key and value:

chap-name name

Specify the name in CHAP. The default is “radiusd”.

Files

/usr/libexec/radiusd/radiusd_eap2mschap

“eap2mschap” module executable.

Examples

An example showing the radiusd_eap2mschap module providing an authentication server that supports EAP-MSCHAPv2. Although the radiusd_file(8) module itself doesn't support any EAP methods, when used with the radiusd_eap2mschap module it becomes possible to support EAP-MSCHAPv2.

/etc/radiusd.conf:

listen on 192.168.0.1
client 192.168.0.0/24 {
    secret SECRET
}
module file {
    set path "/etc/npppd/npppd-users"
}
module eap2mschap
authentication-filter * by eap2mschap
authenticate * by file

Releases

Unchanged in 6 releases since OpenBSD 7.6.

  1. 7.6–8.0

History

The radiusd_eap2mschap module first appeared in OpenBSD 7.6.

From man 8.0-current-20261101 in OpenBSD 8.0-current (2026-11-01). Parsed by carta from the page's mdoc source.