Remove with_ntdomain_hack in rlm_mschap?
Arran Cudbard-Bell
a.cudbardb at freeradius.org
Thu Oct 27 15:35:44 CEST 2011
On 27 Oct 2011, at 14:21, Phil Mayers wrote:
> On 27/10/11 08:15, Alan DeKok wrote:
>> Arran Cudbard-Bell wrote:
>>> Could we set it to default to 'yes' so it can be explicitly disabled, but is on by default?
>>
>> Change the source code so that the default is "yes".
>>
>> Delete the configuration from raddb/modules/mschap
>>
>> People can still change it, but the default should work better.
>
> That will work.
>
> I'm a little cautious about the naming - "hack" implies it is somehow a bad thing to do, and I would prefer to see it named "strip_ntdomain" - but small changes are better than big I guess.
>
how about ''fix_microsoft_retardation'' :) - But yes, +1 for renaming to strip_ntdomain. I couldn't even get Windows 2000 SP4 to authenticate without it enabled (supplicant testing a while back).
-Arran
Arran Cudbard-Bell
a.cudbardb at freeradius.org
Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !
More information about the Freeradius-Devel
mailing list