MSCHAPv2, MySQL, Freeradius

[Alan DeKok]

"Dan Russell" <dan at in-house.com.au> wrote:
> >> If I used a third party tool like mkntpwd to create NT Hashes, could
> I
> >> put premade hashes in the database and use them to authenticate
...
> Is there any specific config change I would need to make to enable this?

  No.  It should work in the default config.

> How does freeradius identify that the password has already been NT
> hashed?  

  Because you put it into the NT-Password attribute, instead of the
User-Password attribute.

> What stops it from encrypting whatever it finds in the radcheck table
> for the password?

  I have no idea what question you're asking.  So far as I can tell,
the answer is "it doesn't work that way".

  Alan DeKok.