23 Jul
2010
23 Jul
'10
4:43 a.m.
Sadly, many people take a hatchet to the configs then seem surprised when things don't work! Best to make small changes one at a time and test them, and put your configs into version control so you can roll them back.
I test freeradius. I can roll back every time ;)
"Won't work" really means it. PEAP/MS-CHAP requires access to the plaintext password or NT/LM hashes, or access to a domain controller with such via use of the "ntlm_auth" helper and Samba.
It is cryptographically impossible for it to be otherwise I'm afraid.
Hmm I will test samba ;) Thank you