MSCHAP / NTLM_AUTH failure on "expired" AD password; out of sync cached creds / AD password.

Alan DeKok aland at deployingradius.com
Fri May 13 07:09:44 CEST 2011


Garber, Neal wrote:
> For now, this is working as designed because FR doesn't support password change via MSCHAP.  Recently, there was a thread talking about
> supporting retry and Phil Mayers wrote and submitted a patch to
> provide retry & password change for MSCHAP (thank you Phil:) ).  But, 
> I'm not sure that code will make it into 2.1.11 because I haven't seen 
> a lot of people posting "I tested it and it works fine" messages.  Of course, Alan would know for sure...

  I think I'll put it into 3.0.  That gives people one more reason to
upgrade. :)

  Alan DeKok.



More information about the Freeradius-Users mailing list