Recommendation

Alan DeKok aland at deployingradius.com
Tue Aug 17 22:29:26 CEST 2010


Paul Dugas wrote:
> On Tue, Aug 17, 2010 at 4:02 PM, Alan DeKok <aland at deployingradius.com> wrote:
>>  If you do not have clear-text or NT hashed passwords in your LDAP
>> database, then *no* tool will magically make MS-CHAP work.  The problem
>> is the method used to store the password.  The problem is *not* the tool
>> used to retrieve the password.
> 
> If I do have NT hashed passwords in LDAP, is PEAP with ntlm_auth the
> recommendation?

  No.

  I suggest reading my messages again.  It's clear you don't understand
what ntlm_auth does.

  Alan DeKok.



More information about the Freeradius-Users mailing list