Inserting NT-Passwords in MySQL database

Alan DeKok aland at deployingradius.com
Sun Mar 18 21:22:31 CET 2012


pamela pomary wrote:
> Please how can I insert into MySQL database, encrypted passwords for
> radius users.

  You use SQL inserts?

> In an earlier mail I posted to the list, Phil suggested
>  NT  hash (MD4 of little-endian UTF-16 form password)
> since it was *not possible to do* *MD5 with mschap.
> *
> I have tried to do:
> 
> insert into radcheck(userName,Attribute,op,value) values
> ('test','NT-Password',':=',NT-hash( 'password' ));
> but it failed because I guess it doesn't exist.

  Uh... does the SQL documentation say that "NT-Hash" will work?


> I dont know how to apply ntlm_auth to cleartext passwords to insert into
> MySQl database.

  You don't.  You use the smbpasswd program.  This is included with
FreeRADIUS.

> How can I achieve encrypting password for radius users in MySQL using
> NT-Password.

  You use smbpassword to create the correct form of the password.  You
then put the 32 hex digits into SQL using SQL inserts.

  Alan DeKok.



More information about the Freeradius-Users mailing list