NTLM in MSCHAP

Alan DeKok aland at deployingradius.com
Tue Mar 25 13:53:34 CET 2008


David Hláčik wrote:
> as i mentioned i have plain text stored passwords (atrib UserPassword)
> in ldap, and i want to change it to crypt, or mda5.

  Don't.

> Mschap need
> NT-Password , which is the best way to solve it?

  Store passwords in clear-text.  Anything else is a bad idea.

> I do not want to store
> NT-Password value in LDAP, or there is no other choice? What about that
> ntlm_auth - it will create from crypt nt and send it to mschap?

  No.

  Alan DeKok.



More information about the Freeradius-Users mailing list