PAP against winbind

Alan DeKok aland at
Wed Jun 1 01:33:22 CEST 2016

On May 31, 2016, at 7:25 PM, Arran Cudbard-Bell <a.cudbardb at> wrote:
> I'd say rlm_wbclient

  I agree,  It's different enough from rlm_pap that it deserves a different module.

> PAP is more for password comparisons.  With this you're sending the credentials off to a remote system.
> rlm_wbclient could include the MSCHAPv2 code too, and password change, and group retrieval. libwbclient can do a lot more than we're currently using it for.

  Hmm. that way lies madness.  But yes, it's not *completely* out of the question.

  Alan DeKok.

More information about the Freeradius-Devel mailing list