mschap : NT-Password has not been normalized by the 'pap' module.

[Alan DeKok]

On Mar 10, 2015, at 8:31 AM, Mohamed Lrhazi <Mohamed.Lrhazi at georgetown.edu> wrote:

> Thank you guys. Am looking at my options trying to migrate existing setup
> from Juniper SBR... I found out that {MD4} header is a Juniper
> requirement.... Their support sites states this in a KB article.

  So edit the password.

	...
	ldap		# gets Password-With-Header
	if (&control:Password-With-Header =~ /^{md4}(.*)$/) {
		update control {
			Password-With-Header := “{nt}${1}"
		}
	}

  I’ll push a fix for rlm_pap so this won’t be needed for 3.0.8

 Alan DeKok.