Server side support of MSV1_0_ALLOW_MSVCHAPV2 flag

Sergey Urushkin urushkin at
Sat Oct 22 18:11:32 UTC 2016

As I see, samba 4.5 doesn't respect MSV1_0_ALLOW_MSVCHAPV2 flag when 
acting as a server. This flag allows using mschapv2 with radius (VPN and 
802.1x) and is more secure than just "ntlm auth = yes" at the same time.
I think many administrators would be glad to have an ability to set 
"ntlm auth = mschapv2".

Client support has been already added here:;a=commit;h=0b500d413c5b76188c0c566318be7079b777237c

Thanks for attention.

Best regards,
Sergey Urushkin

More information about the samba-technical mailing list