PAP against winbind

[Alan DeKok]

On May 31, 2016, at 7:41 PM, Matthew Newton <mcn4 at leicester.ac.uk> wrote:
> OK, I'll separate it out. I wondered about a different module, but
> it's so small that a separate module didn't quite seem worth it.
> But I agree that is probably cleaner.

  rlm_pap is really for the server to do authentication itself.  So that makes sense.

> Group retrieval is definitely another possibilty though.

  That would be nice.

> Hmm - maybe mschap should itself call across to rlm_wbclient. OK,
> madness... would only be one connection pool then, though.

  That's arguably better.  We already have modules calling other modules.

  Alan DeKok.