(RADIATOR) NT password issue

[Ryan Moore]

Thanks Mike!

For anyone who might need it, this did the trick:

# Prepend '{nthash}' to the NT Password LDAP result
PostSearchHook sub {my $ntpassword = 
$_[3]->get_check->get_attr('User-Password');\
                       $_[3]->get_check->change_attr('User-Password', 
"{nthash}$ntpassword");}

- Ryan



Mike McCauley wrote:

>Hello again Ryan,
>
>
>On Tuesday 19 April 2005 08:13, Mike McCauley wrote:
>  
>
>>Hello Ryan,
>>
>>On Tuesday 19 April 2005 06:19, Ryan Moore wrote:
>>    
>>
>>>All -
>>>
>>>Our LDAP server does not store NThashes with {nthash} in front of the
>>>hash. So I'm getting:
>>>
>>>Mon Apr 18 16:06:53 2005: DEBUG: LDAP got ntPassword: BAA.....
>>>
>>>instead of:
>>>
>>>Mon Apr 11 11:21:58 2005: DEBUG: LDAP got ntPassword: {nthash}BAA.....
>>>
>>>and this creates:
>>>
>>>Mon Apr 18 16:06:53 2005: DEBUG: EAP result: 1, Bad LEAP Password
>>>
>>>Before I go monkeying with my LDAP server, is there any way around this?
>>>I'm handy with Perl, so...
>>>      
>>>
>>I think the easiest answer would be to set up a a PostAuthHook in your
>>AuthBy LDAP2 that will adjust the User-Password check item in the $user
>>record and prepend {nthash}.
>>    
>>
>
>Ooops, I meant PostSearchHook
>
>Sorry.
>Cheers.
>
>  
>
>>Cheers.
>>
>>    
>>
>>>- Ryan
>>>
>>>--
>>>Archive at http://www.open.com.au/archives/radiator/
>>>Announcements on radiator-announce at open.com.au
>>>To unsubscribe, email 'majordomo at open.com.au' with
>>>'unsubscribe radiator' in the body of the message.
>>>      
>>>
>
>  
>

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.