(RADIATOR) NT password issue

[Mike McCauley]

Hello Ryan,


On Tuesday 19 April 2005 06:19, Ryan Moore wrote:
> All -
>
> Our LDAP server does not store NThashes with {nthash} in front of the
> hash. So I'm getting:
>
> Mon Apr 18 16:06:53 2005: DEBUG: LDAP got ntPassword: BAA.....
>
> instead of:
>
> Mon Apr 11 11:21:58 2005: DEBUG: LDAP got ntPassword: {nthash}BAA.....
>
> and this creates:
>
> Mon Apr 18 16:06:53 2005: DEBUG: EAP result: 1, Bad LEAP Password
>
> Before I go monkeying with my LDAP server, is there any way around this?
> I'm handy with Perl, so...

I think the easiest answer would be to set up a a PostAuthHook in your AuthBy 
LDAP2 that will adjust the User-Password check item in the $user record and 
prepend {nthash}.

Cheers.


>
> - Ryan
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS etc.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.