Re: Secure Storage and Transport of User Credentials

Hi,

The problem is, that I do not trust the network and I don't want to store the password in plain. Also, isn't the NT Hash insecure beacuse it is easily cracked? Or am i mixing things up?

if you dont trust the network then you will also need to looking at using TLS to transport things around - eg RADSEC or a VPN tunnel. as for NT hash - yes, there are security issues but only if you have access to them or expose them - if you bind the FreeRADIUS system to an AD and use eg ntlm_auth then the NThash isnt accessed. alan