MS-CHAP2-Request is rejected

Manoel bezerra maneo.ufrn at gmail.com
Mon May 20 19:37:27 CEST 2019


So, do you suggest using/storage clear-text instead ntpassword?




Atenciosamente.
Manoel Bezerra da Costa Neto
Analista de infraestruta em Redes de Computadores.


Em seg, 20 de mai de 2019 às 14:24, Alan DeKok <aland at deployingradius.com>
escreveu:

>
>
> > On May 20, 2019, at 1:20 PM, Manoel bezerra <maneo.ufrn at gmail.com>
> wrote:
> >
> > but it is not advisable to store clear text passwords
>
>   It's 2019.  NT hashed passwords are entirely equivalent to clear text
> passwords.  Thinking otherwise is just security theatre.
>
>   Among other references:
>
> https://www.theregister.co.uk/2019/02/14/password_length/
>
>  "Use an 8-char Windows NTLM password? Don't. Every single one can be
> cracked in under 2.5hrs"
>
>   Use *real* security.  Not fake security.
>
>   Alan DeKok.
>
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list