[Patch] myldap-pub.py

Matthias Dieter Wallnöfer mdw at samba.org
Fri Aug 20 10:06:46 MDT 2010


Hi Lukasz,

Lukasz Zalewski wrote:
> Hi Matthias,
> On 08/20/2010 06:55 AM, Matthias Dieter Wallnöfer wrote:
> Yup the account is non-functional, but what confused me was it didn't 
> have the diabled account flag set. So my question is shall the script 
> explicitly set disabled flag if no hashes are present (or no NT has is 
> present) or shall we leave it as it is
Well, I would suggest it since at least Windows Server allows accounts 
without passwords only with the disabled flag (you cannot enable an 
account without any password). On the other hand s4 doesn't implement 
this check yet, I think. So it' up to you what you prefer.
> The script is intended to import hashes, rather than plain texp pwds 
> (or no passwords) so i believe metze's way is the only way ;)
Yeah, please do that.

Matthias


More information about the samba-technical mailing list