Re: Yet another PEAP/LDAP Question

Phil Mayers <p.mayers@imperial.ac.uk> wrote:

# Without the leading "0x", NT-Passwords will not work. # This goes for NT-Passwords stored in SQL, too.

Having said that, I don't see any evidence of this so-called "figuring out" in the rlm_ldap source code - it looks to me like it does this:

That "figuring it out" is in the MSCHAP module. The comments in the LDAP config are wrong, and should be deleted.

i.e. a straight copy to User-Password with optional removal of a {type} header

This is fixed in the CVS head. Alan DeKok.