Samba 3.0.24 will provide support for changing passwords via ntlm_auth.  Unfortunately (for rlm_mschap in FR), it is implemented using a new helper protocol, “ntlm-change-password-1”, which I believe would require non-trivial changes to rlm_mschap as it doesn’t currently use ntlm_auth helper protocols.  Does anyone have plans to incorporate this functionality?  If so, I’d be willing to help.  If not, I’m going to start investigating and implementing the changes required.  I’m thinking that ideally, it would be implemented in a way that doesn’t break the current method of configuring ntlm_auth in radiusd.conf (i.e., it would be backward compatible to avoid requiring everyone to change the config. if they aren’t interested in the new functionality).

Is anyone else interested in having this capability and/or have ideas on how best to integrate it?