mschap : NT-Password has not been normalized by the 'pap' module.

[Arran Cudbard-Bell]

> On 10 Mar 2015, at 09:57, Alan DeKok <aland at deployingradius.com> wrote:
> 
> On Mar 10, 2015, at 8:31 AM, Mohamed Lrhazi <Mohamed.Lrhazi at georgetown.edu> wrote:
> 
>> Thank you guys. Am looking at my options trying to migrate existing setup
>> from Juniper SBR... I found out that {MD4} header is a Juniper
>> requirement.... Their support sites states this in a KB article.
> 
>  So edit the password.
> 
> 	...
> 	ldap		# gets Password-With-Header
> 	if (&control:Password-With-Header =~ /^{md4}(.*)$/) {
> 		update control {
> 			Password-With-Header := “{nt}${1}"
> 		}
> 	}
> 
>  I’ll push a fix for rlm_pap so this won’t be needed for 3.0.8
> 
> Alan DeKok.

That should be

ldap		# gets Password-With-Header
if (&control:Password-With-Header =~ /^{md4}(.*)$/) {
	update control {
		Password-With-Header := "{nt}%{1}"}}
	}
}

Teach apple mail not to use smart quotes too...

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150310/2b81d77a/attachment.sig>