Issue with MSCHAP

[Fajar A. Nugraha]

On Mon, Nov 5, 2012 at 6:26 AM, Ryan Summey <ryan.summey at gmail.com> wrote:
> What do i need to do to enable nt-hash rather than pap?

That question should be: "how do I put nt-hash password in the db"?

IIRC the attribute name is "NT-Password" (you use this instead of
"Cleartext-Password"  as "attribute" in radcheck), and you create it
using "smbecrypt" (part of FR):

# smbencrypt "password"
LM Hash                                 NT Hash
--------------------------------        --------------------------------
E52CAC67419A9A224A3B108F3FA6CB6D        8846F7EAEE8FB117AD06BDD830B7586C

In that example you put "8846F7EAEE8FB117AD06BDD830B7586C" as "value"
in radcheck.

--
Fajar