mschap : NT-Password has not been normalized by the 'pap' module.

Arran Cudbard-Bell a.cudbardb at freeradius.org
Tue Mar 10 15:16:26 CET 2015


> On 10 Mar 2015, at 10:15, Arran Cudbard-Bell <a.cudbardb at freeradius.org> wrote:
> 
> 
>> On 10 Mar 2015, at 09:57, Alan DeKok <aland at deployingradius.com> wrote:
>> 
>> On Mar 10, 2015, at 8:31 AM, Mohamed Lrhazi <Mohamed.Lrhazi at georgetown.edu> wrote:
>> 
>>> Thank you guys. Am looking at my options trying to migrate existing setup
>>> from Juniper SBR... I found out that {MD4} header is a Juniper
>>> requirement.... Their support sites states this in a KB article.
>> 
>>  So edit the password.
>> 
>> 	...
>> 	ldap		# gets Password-With-Header
>> 	if (&control:Password-With-Header =~ /^{md4}(.*)$/) {
>> 		update control {
>> 			Password-With-Header := “{nt}${1}"
>> 		}
>> 	}
>> 
>>  I’ll push a fix for rlm_pap so this won’t be needed for 3.0.8
>> 
>> Alan DeKok.
> 
> That should be
> 
> 
> Teach apple mail not to use smart quotes too...
> 
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS development team
> 
> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
> 

ldap		# gets Password-With-Header
if (&control:Password-With-Header =~ /^{md4}(.*)$/) {
	update control {
		Password-With-Header := "{nt}%{1}"
	}
}

pre-coffee *sigh*


Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150310/9670b8a1/attachment.sig>


More information about the Freeradius-Users mailing list