From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 8 Jun 2021 13:23:33 +0000 (-0400)
Subject: update docs and fixes
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=44be23661e2e0e30207b4c63dd4e3cd4b345cd3e;p=thirdparty%2Ffreeradius-server.git

update docs and fixes
---

diff --git a/raddb/mods-available/mschap b/raddb/mods-available/mschap
index 905bfa59777..5eb4501d6c2 100644
--- a/raddb/mods-available/mschap
+++ b/raddb/mods-available/mschap
@@ -10,7 +10,7 @@
 #  The `mschap` module performs `MS-CHAP` and `MS-CHAPv2` authentication.
 #
 #  MS-CHAP authentication requires access to either the
-#  Password.Cleartext or NT-Password attribute for the user.  Due to
+#  Password.Cleartext or Password.NT attribute for the user.  Due to
 #  the limitations of MS-CHAP, no other password "encryption" methods
 #  are possible.
 #
@@ -23,7 +23,20 @@
 #  Samba documentation for the meaning of SMB account control. The
 #  module does not read Samba password files. Instead, the rlm_passwd
 #  module can be used to read a Samba password file, and then supply
-#  an `NT-Password` attribute which this module can use.
+#  an `Password.NT` attribute which this module can use.
+#
+#  The `mschap` module registers a few `xlat` functions.
+#
+#  [options="header,autowidth"]
+#  |===
+#  | Function          | Description
+#  | `Challenge`       | The MS-CHAP challenge.
+#  | `Domain-Name`     | The full domain name, taken from the `User-Name` attribute
+#  | `NT-Domain`       | The NT domain portion of the domain name, taken from the `User-Name` attribute
+#  | `NT-Hash`         | Take the NT-Hash of the string passed into the xlat
+#  | `NT-Response`     | The MS-CHAP response.
+#  | `User-Name`       | The MS-CHAP username portion of the `User-Name` attribute.
+#  |===
 #
 #  [NOTE]
 #  ====