mschap : NT-Password has not been normalized by the 'pap' module.

Arran Cudbard-Bell a.cudbardb at
Mon Mar 9 20:48:07 CET 2015

> On 9 Mar 2015, at 15:42, Mohamed Lrhazi <Mohamed.Lrhazi at> wrote:
> Hello,
> Trying to get freeradius working for tls and mschap and ldap based
> authentication... seems the password is found correctly in LDAP, but fails
> to be decoded maybe?
> the passwords in LDAP look like: {MD4}6DDDA<an so on..>

Map the LDAP attribute to control:Password-With-Header instead of control:NT-Password,
the PAP module should then normalise the NT Password string, by stripping off the header,
converting the hex to binary, and copying it to control:NT-Password.


Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <>

More information about the Freeradius-Users mailing list