plugins
plugins copied to clipboard
net/freeradius: Support NT hash of user password
To improve security provide an "advanced" option to avoid storing users' radius passwords in plaintext.
The default behaviour is unchanged.
Tested using an openwrt access point as a client with the opnsense freeradius plugin set to use PEAP.
Compare: https://github.com/pfsense/FreeBSD-ports/pull/822
I'm not against this, but it should be noted that an NT hash is almost the same risk as a plain password these days.
Asked maintainer for feedback.
Cheers, Franco
User model version bumped.
Thanks for your reviews.
Is this ok as-is? Or are there more changes needed?
Looks good :)