Ms-Chap + NT-Password

Anton Kiryushkin swood at fotofor.biz
Thu Dec 20 08:47:10 CET 2018


Hello, Matthew.

Yes, I have the same fear about the hash.
I made it in the two ways:
- hash=$(printf '%s' "${pass}" | iconv -t utf16le | openssl md4 2>/dev/null
| awk '{print $NF}')
- smbencrypt

Both ways are equal.  Which method is right in my case?

чт, 20 дек. 2018 г. в 02:30, Matthew Newton <mcn at freeradius.org>:

> On Thu, 2018-12-20 at 02:22 +0000, Anton Kiryushkin wrote:
> > Thu Dec 20 01:10:08 2018 : Debug: (138) sql-wifi:   NT-Password :=
> > 0x696e616d6974414c545a694e3039393021
>
> That hash entirely consists of printable characters, which seems
> improbable...
>
> > Thu Dec 20 01:10:08 2018 : WARNING: (138) mschap: NT-Password found
> > but
> > incorrect length, expected 16 bytes got 17 bytes.  Authentication may
> > fail
>
> ...and is not the correct length either.
>
> Your password hash isn't good.
>
> --
> Matthew
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html



-- 
Best regards,
Anton Kiryushkin


More information about the Freeradius-Users mailing list