Extracting accounts and passwords from Novel Netware

[James Sutherland]

On Mon, 31 Jul 2000, Richard Sharpe wrote:

> Hi,
> 
> Is there a simple tool for extracting the list of accounts from a Netware
> server?
> 
> Also, are plaintext password recoverable from a Netware server of any
> vintage, or are they all hashed with such a strong hash it is not possible
> to recover them?

Up to about 3.x the encryption was optional, IIRC? 4.x and later (NDS)
hash them a la Unix - you can get the encrypted version, but decryption is
a matter of brute force, and takes serious time.

A nice simple package for Netware, NT and Unix (PAM) to redirect all auth
to a single tree, containing passwords in all the formats needed (and kept
in sync) might be nice... Some of this is already done, but not all. IIRC,
we'll need to have passwords in NT format for SMB support, as well as
crypt or MD5 for Unix. It's possible to keep two distinct databases in
sync, but being able to point everything at a single database would be
nice...


James.