pap password readability ?

[harmkanters]

We have users claiming they punch in the correct PAP password. Is there a way that we can verify what they type ? We use ACS with radius.

I can see string of digits in the file C:\Program Files\CiscoSecure ACS v3.3\CSRadius\Logs\rds.log

with the title: "[002] User-Password..value: ..."

But that is in some way encrypted.

[Richard Burts]

I am not aware of a way to recover the clear text password from the log file. If you have the ability to capture and analyze packets on the network (sniffer or similar capability) you could see the text in the captured packet.

HTH

Rick

[harmkanters]

I thought about that, but al components are @ remote co-locations. that would involve remote span ports. very difficult..