On 27 Oct 2011, at 14:21, Phil Mayers wrote:
On 27/10/11 08:15, Alan DeKok wrote:
Arran Cudbard-Bell wrote:
Could we set it to default to 'yes' so it can be explicitly disabled, but is on by default?
Change the source code so that the default is "yes".
Delete the configuration from raddb/modules/mschap
People can still change it, but the default should work better.
That will work.
I'm a little cautious about the naming - "hack" implies it is somehow a bad thing to do, and I would prefer to see it named "strip_ntdomain" - but small changes are better than big I guess.
how about ''fix_microsoft_retardation'' :) - But yes, +1 for renaming to strip_ntdomain. I couldn't even get Windows 2000 SP4 to authenticate without it enabled (supplicant testing a while back). -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !