Yet another PEAP/LDAP Question

[Alan DeKok]

Phil Mayers <p.mayers at imperial.ac.uk> wrote:
> #  Without the leading "0x", NT-Passwords will not work.
> #  This goes for NT-Passwords stored in SQL, too.
> 
> Having said that, I don't see any evidence of this so-called "figuring 
> out" in the rlm_ldap source code - it looks to me like it does this:

  That "figuring it out" is in the MSCHAP module.  The comments in the
LDAP config are wrong, and should be deleted.

> i.e. a straight copy to User-Password with optional removal of a {type} 
> header

  This is fixed in the CVS head.

  Alan DeKok.