Remove with_ntdomain_hack in rlm_mschap?

Arran Cudbard-Bell a.cudbardb at freeradius.org
Thu Oct 27 15:35:44 CEST 2011


On 27 Oct 2011, at 14:21, Phil Mayers wrote:

> On 27/10/11 08:15, Alan DeKok wrote:
>> Arran Cudbard-Bell wrote:
>>> Could we set it to default to 'yes' so it can be explicitly disabled, but is on by default?
>> 
>>   Change the source code so that the default is "yes".
>> 
>>   Delete the configuration from raddb/modules/mschap
>> 
>>   People can still change it, but the default should work better.
> 
> That will work.
> 
> I'm a little cautious about the naming - "hack" implies it is somehow a bad thing to do, and I would prefer to see it named "strip_ntdomain" - but small changes are better than big I guess.
> 

how about ''fix_microsoft_retardation'' :) - But yes, +1 for renaming to strip_ntdomain. I couldn't even get Windows 2000 SP4 to authenticate without it enabled (supplicant testing a while back).

-Arran

Arran Cudbard-Bell
a.cudbardb at freeradius.org

Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !





More information about the Freeradius-Devel mailing list