Thank you for the help guys really appreciate it. Is there anyway to automate this? On Nov 5, 2012 12:54 AM, "Fajar A. Nugraha" <list@fajar.net> wrote:
On Mon, Nov 5, 2012 at 6:26 AM, Ryan Summey <ryan.summey@gmail.com> wrote:
What do i need to do to enable nt-hash rather than pap?
That question should be: "how do I put nt-hash password in the db"?
IIRC the attribute name is "NT-Password" (you use this instead of "Cleartext-Password" as "attribute" in radcheck), and you create it using "smbecrypt" (part of FR):
# smbencrypt "password" LM Hash NT Hash -------------------------------- -------------------------------- E52CAC67419A9A224A3B108F3FA6CB6D 8846F7EAEE8FB117AD06BDD830B7586C
In that example you put "8846F7EAEE8FB117AD06BDD830B7586C" as "value" in radcheck.
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html