mschap : NT-Password has not been normalized by the 'pap' module.

[Mohamed Lrhazi]

On Tue, Mar 10, 2015 at 10:16 AM, Arran Cudbard-Bell <
a.cudbardb at freeradius.org> wrote:

> ldap            # gets Password-With-Header
> if (&control:Password-With-Header =~ /^{md4}(.*)$/) {
>         update control {
>                 Password-With-Header := "{nt}%{1}"
>         }
> }



Thanks Arran. This would go in my inner-tunnel server, authorize section?
right? which I currently have as :

ldap
     if ((ok || updated) && User-Password) {
         update {
             control:Auth-Type := ldap
          }
     }


Or in my ldap module config, which I current have as:

        update {
          control:Password-With-Header    += guntlmhash
        }