document --allow-mschapv2

diff --git a/raddb/mods-available/mschap b/raddb/mods-available/mschap
index 18f600589b67177679b9521feb65b7fbb0200ac2..3220393f94cb7a58244fee4d358d2d7bef861fea 100644 (file)
--- a/raddb/mods-available/mschap
+++ b/raddb/mods-available/mschap
@@ -55,6 +55,12 @@ mschap {
        # attribute, and do prefix/suffix checks in order to obtain
        # the "best" user name for the request.
        #
+       #  Depending on the AD / Samba configuration, you may also need to add:
+       #
+       #       --allow-mschapv2
+       #
+       #  to the list of command-line options.
+       #
 #      ntlm_auth = "/path/to/ntlm_auth --request-nt-key --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}"
 
        # The default is to wait 10 seconds for ntlm_auth to

diff --git a/raddb/mods-available/ntlm_auth b/raddb/mods-available/ntlm_auth
index 9ee11aa72bf649b1b5a962a7b47a5a690ee034a2..ab0017c9b5bbf2a8d3f06f9913e543643236f59b 100644 (file)
--- a/raddb/mods-available/ntlm_auth
+++ b/raddb/mods-available/ntlm_auth
@@ -6,6 +6,12 @@
 #
 #      https://bugzilla.samba.org/show_bug.cgi?id=6563
 #
+#  Depending on the AD / Samba configuration, you may also need to add:
+#
+#      --allow-mschapv2
+#
+#  to the list of command-line options.
+#
 exec ntlm_auth {
        wait = yes
        program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}"