MS-CHAP is plain-text equivalent.

Mark the Challenge field as secret, so that it doesn't get
exposed when people run the server in debug mode.

diff --git a/share/dictionary.microsoft b/share/dictionary.microsoft
index 6ba9dd5bedec065f0535f82390a8b6e9cdbaaf0f..fdc7bff59f56dca34c642f10c61173f8409b43ca 100644 (file)
--- a/share/dictionary.microsoft
+++ b/share/dictionary.microsoft
@@ -15,7 +15,7 @@ ATTRIBUTE     MS-CHAP-Error                           2       string
 ATTRIBUTE      MS-CHAP-CPW-1                           3       octets[70]
 ATTRIBUTE      MS-CHAP-CPW-2                           4       octets[84]
 ATTRIBUTE      MS-CHAP-LM-Enc-PW                       5       octets
-ATTRIBUTE      MS-CHAP-NT-Enc-PW                       6       octets
+ATTRIBUTE      MS-CHAP-NT-Enc-PW                       6       octets  secret
 ATTRIBUTE      MS-MPPE-Encryption-Policy               7       integer
 
 VALUE  MS-MPPE-Encryption-Policy       Encryption-Allowed      1
@@ -32,7 +32,7 @@ VALUE MS-MPPE-Encryption-Types        RC4-40or128-bit-Allowed 6
 
 ATTRIBUTE      MS-RAS-Vendor                           9       integer # content is Vendor-ID
 ATTRIBUTE      MS-CHAP-Domain                          10      string
-ATTRIBUTE      MS-CHAP-Challenge                       11      octets
+ATTRIBUTE      MS-CHAP-Challenge                       11      octets  secret
 ATTRIBUTE      MS-CHAP-MPPE-Keys                       12      octets[24]  encrypt=1
 ATTRIBUTE      MS-BAP-Usage                            13      integer
 ATTRIBUTE      MS-Link-Utilization-Threshold           14      integer # values are 1-100