Re: Username and/or password lengths for OpenIKED with EAP MSCHAP-V2

On 3/5/23 16:49, J Doe wrote:
> Hello,
>
> I was wondering if there is a limit to the number of characters that
> the username and/or password can be when using EAP MSCHAP-V2 in OpenIKED.
>
> In particular, I was wondering if either OpenIKED enforced a limit or
> whether MSCHAP-V2 has a limit based on the underlying authentication
> scheme ?
>
> Thanks,
>
> - J
>
A quick 30s look into the source code shows -
https://github.com/openbsd/src/blob/master/sbin/iked/chap_ms.h#LL30C2-L30C32

> #define MSCHAP_MAXNTPASSWORD_SZ    255    /* unicode chars */

a good point for you to start looking :)

Cheers,
Aisha