PEAP sending username in the clear

anonymous_at_discussions.microsoft.com
Date: 06/04/04


Date: Fri, 4 Jun 2004 13:55:01 -0700

I am using the MS 313664 PEAP supplicant for win2k. It
was my understanding the PEAP created an SSL tunnel for
transmitting ALL of the user credentials. When I capture a
PEAP authentication with my sniffer the user ID is passed
in the clear. Is this normal or do I have something
configured wrong?

Any help is greatly appreciated.


Quantcast