I use freeradius 2.0.2 with PEAP and MSCHAPv2 for authentication. I want to authenticate on LDAP database, but these protocols only read clear-text or hashes of the passwords on LDAP database. My question is: how do I make hashes of the passwords stored on LDAP?? Can I use SHA-256 for hashing??? Grateful, Eduardo.
Eduardo Cavalcanti wrote:
I use freeradius 2.0.2 with PEAP and MSCHAPv2 for authentication. I want to authenticate on LDAP database, but these protocols only read clear-text or hashes of the passwords on LDAP database. My question is: how do I make hashes of the passwords stored on LDAP?? Can I use SHA-256 for hashing???
No. http://deployingradius.com/documents/protocols/compatibility.html Alan DeKok.
Ok Alan, I have this table. Sorry for the dummie question, but where do I find the tool to make nt hashes??? Alan DeKok escreveu:
Eduardo Cavalcanti wrote:
I use freeradius 2.0.2 with PEAP and MSCHAPv2 for authentication. I want to authenticate on LDAP database, but these protocols only read clear-text or hashes of the passwords on LDAP database. My question is: how do I make hashes of the passwords stored on LDAP?? Can I use SHA-256 for hashing???
No.
http://deployingradius.com/documents/protocols/compatibility.html
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ok, so I'll have to type: smbencrypt "password" And then I'll have the encrypted password and it's nt hash right?? Alan DeKok escreveu:
Eduardo Cavalcanti wrote:
Sorry for the dummie question, but where do I find the tool to make nt hashes???
Look for "smbencrypt". It's installed with the server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Eduardo Cavalcanti