From ba2cb35235322a54ca817457c018fbedd96b9108 Mon Sep 17 00:00:00 2001 From: cordelster Date: Wed, 14 Oct 2020 00:40:06 -0700 Subject: [PATCH] Update mods-enabled-ldap (#2061) Add NT-Password entry for FreeIPA compatibility. FreeIPA requires looking for ipaNTHash. --- .../service/templates/OPNsense/Freeradius/mods-enabled-ldap | 1 + 1 file changed, 1 insertion(+) diff --git a/net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-ldap b/net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-ldap index 30b5f8d29..cd80e84f2 100644 --- a/net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-ldap +++ b/net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-ldap @@ -28,6 +28,7 @@ ldap { control:LM-Password := 'sambaLmPassword' control:NT-Password := 'sambaNtPassword' control:LM-Password := 'dBCSPwd' + control:NT-Password := 'ipaNTHash' control:Password-With-Header += 'userPassword' control:SMB-Account-CTRL-TEXT := 'acctFlags' control:Expiration := 'radiusExpiration'