From: Alan T. DeKok <aland@freeradius.org>
Date: Fri, 11 Dec 2015 14:56:24 +0000 (-0500)
Subject: notes for AD security
X-Git-Tag: release_3_0_11~87
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d9582a467b8fb2a741ebd4412a9667c2c4c7339e;p=thirdparty%2Ffreeradius-server.git

notes for AD security
---

diff --git a/doc/ChangeLog b/doc/ChangeLog
index 5d4d172b976..b2d691a3768 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -21,6 +21,9 @@ FreeRADIUS 3.0.11 Mon 05 Oct 2015 15:00:00 EDT urgency=medium
 	  See raddb/mods-available/eap, "skip_if_ocsp_ok".
 	* Set TLS-OCSP-Cert-Valid = yes / no / skipped, which
 	  is the result from the OCSP check.
+	* Interoperate with AD and "LmCompatibiltyLevel = 5",
+	  by always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for
+	  native winbind in rlm_mschap.
 
 	Bug fixes
 	* Fix issue where field nas_type would not be accessible via