Remove with_ntdomain_hack in rlm_mschap?

Arran Cudbard-Bell a.cudbardb at
Thu Oct 27 15:35:44 CEST 2011

On 27 Oct 2011, at 14:21, Phil Mayers wrote:

> On 27/10/11 08:15, Alan DeKok wrote:
>> Arran Cudbard-Bell wrote:
>>> Could we set it to default to 'yes' so it can be explicitly disabled, but is on by default?
>>   Change the source code so that the default is "yes".
>>   Delete the configuration from raddb/modules/mschap
>>   People can still change it, but the default should work better.
> That will work.
> I'm a little cautious about the naming - "hack" implies it is somehow a bad thing to do, and I would prefer to see it named "strip_ntdomain" - but small changes are better than big I guess.

how about ''fix_microsoft_retardation'' :) - But yes, +1 for renaming to strip_ntdomain. I couldn't even get Windows 2000 SP4 to authenticate without it enabled (supplicant testing a while back).


Arran Cudbard-Bell
a.cudbardb at

Betelwiki, Betelwiki, Betelwiki.... !

More information about the Freeradius-Devel mailing list