Re: LDAP Data Mangling

2010-09-09 Thread Alan DeKok
Kevin Ehlers wrote: > I found a solution that works in the mean-time by writing a perl module. > I'm using the perl module during the authorize section in the > inner-tunnel virtual server. What it does is query ldap, and get the > nt-password attribute from our ldap server. It then does a $nt-p

Re: LDAP Data Mangling

2010-09-08 Thread Kevin Ehlers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/3/10 2:30 PM, Alan DeKok wrote: > Kevin Ehlers wrote: >> Is it possible to modify attributes returned from ldap? E.g. We're >> trying to do wpa-enterprise with peap-mschapv2. We store our nt hash >> passwords as "{nthash}" instead of "{nt}". It

Re: LDAP Data Mangling

2010-09-03 Thread Alan DeKok
Kevin Ehlers wrote: > Is it possible to modify attributes returned from ldap? E.g. We're > trying to do wpa-enterprise with peap-mschapv2. We store our nt hash > passwords as "{nthash}" instead of "{nt}". It looks like > the mschap module doesn't auto-detect the hash-type correctly, and says > t

LDAP Data Mangling

2010-09-03 Thread Kevin Ehlers
Hi, Is it possible to modify attributes returned from ldap? E.g. We're trying to do wpa-enterprise with peap-mschapv2. We store our nt hash passwords as "{nthash}" instead of "{nt}". It looks like the mschap module doesn't auto-detect the hash-type correctly, and says that it never received a v