31 May
2016
31 May
'16
7:33 p.m.
On May 31, 2016, at 7:25 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
I'd say rlm_wbclient
I agree, It's different enough from rlm_pap that it deserves a different module.
PAP is more for password comparisons. With this you're sending the credentials off to a remote system.
rlm_wbclient could include the MSCHAPv2 code too, and password change, and group retrieval. libwbclient can do a lot more than we're currently using it for.
Hmm. that way lies madness. But yes, it's not *completely* out of the question. Alan DeKok.