On Nov 5, 2012 12:54 AM, "Fajar A. Nugraha" <list@fajar.net> wrote:

On Mon, Nov 5, 2012 at 6:26 AM, Ryan Summey <ryan.summey@gmail.com> wrote:
> What do i need to do to enable nt-hash rather than pap?

That question should be: "how do I put nt-hash password in the db"?

IIRC the attribute name is "NT-Password" (you use this instead of
"Cleartext-Password"  as "attribute" in radcheck), and you create it
using "smbecrypt" (part of FR):

# smbencrypt "password"
LM Hash                                 NT Hash
--------------------------------        --------------------------------
E52CAC67419A9A224A3B108F3FA6CB6D        8846F7EAEE8FB117AD06BDD830B7586C

In that example you put "8846F7EAEE8FB117AD06BDD830B7586C" as "value"
in radcheck.

--
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html