ntlm_auth return value

[MKondrin]

Hello!

I am writing custom script substituting ntlm_auth program which 
authenticates users of our subnet using freeradius and mschap module. 
But I do not quite understand what is the expected return value of the 
ntlm_auth program. I think that my script should return the string 
NT_KEY: xxx. where xxx is a NT-hash of user's password. But when I made 
my script return this value then only  TTLS/MSCHAPV1 authentication 
works, but not TTLS/MSCHAPV2 and PEAP/MSCHAPV2 which both hangs on the 
second phase. Looking into the source code of 
freeradius-server-2.1.12/src/modules/rlm_mschap/rlm_mschap.c (lines No. 
753 vs.691) I have found that rlm_mschap module rather expects from the 
ntlm_auth not the NT-hash itself but rather a MD4 hash of the NT-hash. 
It is not hard for me to change my script accordingly, but I wonder is 
this an intended behavior or a bug?

Thank you in advance.

M.Kondrin