"Best" authentication mechanisms for Wi-Fi

[Hoggins!]

Thank you.

Le 05/05/2015 11:30, Olivier Nicole a écrit :
> In the same newbie language (because I am), you must use
> EAP/MS-CHAP. This implies that you have your passwords stored in a LMNT
> compatible way (some flavor of MD4).
>
> What I ended with in LDAP is a normal MD5 hashed password for more of
> the usage and the same password hashed the MS way for Samba and 802.11x
> (and all the burden to keep the passwords in sync).
>
> Best regards,
>
> Olivier

Indeed, I would have preferred to keep our current hashing mechanism,
that's why I can't really move on to this. And of course, because once
the passwords are hashed our way, we can't hash them differently, being
unable to have the clear text ones.

Cheers.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150505/024b01f4/attachment-0001.sig>