search for: mschapv3

..., 2016, at 15:06 , Andrew Bartlett <abartlet at samba.org> wrote: > > > Yes, this really, really sucks. MSCHAPv2 is NTLM, not NTLMv2 based. > This is despite NTLMv2 being around when they 'designed' this > mechanism. Sadly no attempt has been made to somehow get an MSCHAPv3 > in that uses NTLMv2. > > On Windows, setting a special flag allows this horrible insecure > mechanism to work on networks that otherwise only allow NTLMv2. Samba > does not honour that flag, but I guess I'm going to need to add a > 'ntlm_auth = only_for_mschapv2' s...

Hi; Samba team say "It is recommended that administrators set these additional options, if compatible with their network environment:" ntlm auth = no I use samba with FreeRadius. I configure "ntlm_ auth = no" but freeradius users not connected to wifi. I use ntlm_auth in FreeRadius side.. best regards

...eeradius users not connected to > wifi. > > > I use ntlm_auth in FreeRadius side.. Yes, this really, really sucks. MSCHAPv2 is NTLM, not NTLMv2 based. This is despite NTLMv2 being around when they 'designed' this mechanism. Sadly no attempt has been made to somehow get an MSCHAPv3 in that uses NTLMv2. On Windows, setting a special flag allows this horrible insecure mechanism to work on networks that otherwise only allow NTLMv2. Samba does not honour that flag, but I guess I'm going to need to add a 'ntlm_auth = only_for_mschapv2' setting. In short, MSCHAPv2 pr...