mschap : NT-Password has not been normalized by the 'pap' module.

[Arran Cudbard-Bell]

> On 9 Mar 2015, at 15:42, Mohamed Lrhazi <Mohamed.Lrhazi at georgetown.edu> wrote:
> 
> Hello,
> 
> Trying to get freeradius working for tls and mschap and ldap based
> authentication... seems the password is found correctly in LDAP, but fails
> to be decoded maybe?
> 
> the passwords in LDAP look like: {MD4}6DDDA<an so on..>

Map the LDAP attribute to control:Password-With-Header instead of control:NT-Password,
the PAP module should then normalise the NT Password string, by stripping off the header,
converting the hex to binary, and copying it to control:NT-Password.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150309/61cc69d4/attachment.sig>