PAP against winbind

[Alan DeKok]

On May 31, 2016, at 7:25 PM, Arran Cudbard-Bell <a.cudbardb at freeradius.org> wrote:
> I'd say rlm_wbclient

  I agree,  It's different enough from rlm_pap that it deserves a different module.

> PAP is more for password comparisons.  With this you're sending the credentials off to a remote system.
> 
> rlm_wbclient could include the MSCHAPv2 code too, and password change, and group retrieval. libwbclient can do a lot more than we're currently using it for.

  Hmm. that way lies madness.  But yes, it's not *completely* out of the question.

  Alan DeKok.