mschap : NT-Password has not been normalized by the 'pap' module.

Alan DeKok aland at
Tue Mar 10 14:57:05 CET 2015

On Mar 10, 2015, at 8:31 AM, Mohamed Lrhazi <Mohamed.Lrhazi at> wrote:

> Thank you guys. Am looking at my options trying to migrate existing setup
> from Juniper SBR... I found out that {MD4} header is a Juniper
> requirement.... Their support sites states this in a KB article.

  So edit the password.

	ldap		# gets Password-With-Header
	if (&control:Password-With-Header =~ /^{md4}(.*)$/) {
		update control {
			Password-With-Header := “{nt}${1}"

  I’ll push a fix for rlm_pap so this won’t be needed for 3.0.8

 Alan DeKok.

More information about the Freeradius-Users mailing list