Fedora’s temporary dislike of (PEAP|TTLS)-MSCHAPv2
- MSCHAPv2 makes use of MD4 in some inner workings
- this algorithm has fallen from grace a long time ago
- Fedora 41 wiped MD4 and thus MSCHAPv2 support from their distribution (presumably by accident)
- fixed after bug report and OS updates
- Microsoft themselves are fading out NTHash authentication options, but with a less aggressive timeline (next versions of Windows and Server will still have it, after that unknown)
- MSCHAPv2 based auth might finally disappear at a mid-term point in the future
- https://techcommunity.microsoft.com/blog/windows-itpro-blog/the-evolution-of-windows-authentication/3926848
- if OS-wide MD4 goes away, one could think of custom code just for RADIUS to keep MSCHAPv2 going, without exposing the old algo system-wide