Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Managed to successfully configure pppd to use PAM (/etc/pam.d/ppp) for authentication steps (used login option in addition to auth). However, this seems to work only for PAP (require pap, refuse chap).

When switching to require chap/mschap the PAM method no longer works. I just get an error in the log: "User X cannot authenticate with CHAP". Any way to make it work? Because how I understand it, PAP is clear text while (MS)CHAP implementations support challenge/response or encryption methods (hence more secure).

share|improve this question
up vote 1 down vote accepted

ppp + pam + chap will not work, i'm afraid. normally the app is asking pam "please authenticate username with password " and pam itself handles the way the passwords are stored in the backend (cleartext, encrypted, or whatever). with chap the user's password already comes in in hashed form which cannot be reverted back to cleartext. but this would be required for pam to work...

share|improve this answer
that is what I thought. thank you for clarification! – Alex Jan 10 '12 at 1:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.