Ntlm_auth vs. Cleartext-password

[Alan DeKok]

Óscar Remírez de Ganuza Satrústegui wrote:
> We were able to /bypass/ the ntlm_auth on some users/groups defining on
> the users file the control item "MS-CHAP-Use-NTLM-Auth := No".
> 
> But is there a way to configure freeradius such that if
> Cleartext-Password password is available it uses it, and otherwise it
> uses ntlm_auth to authenticate?

authorize {
	...

	if (control:Cleartext-Password) {
		update control {
			MS-CHAP-Use-NTLM-Auth := No
		}
	}

	...

}

  Alan DeKok.