Authenticating CHAP-Password to Pam (Kerberos 5 to AD)

[Alan DeKok]

Phil Mayers <p.mayers at imperial.ac.uk> wrote:
> I'm confused - I and many people are doing MS-CHAP to an AD domain with 
> samba3, winbind and the ntlm_auth helper - what are you referring to 
> that doesn't work that samba4 would change?

  Yes, they're using the old-style NT4 logins.  So MS-CHAP works.

  Samba4 *may* allow pulling clear-text passwords from AD, in which
case CHAP will work, too.

  Alan DeKok.