[Samba] passwords - windows - clear or hashed over wire?

[Chris Bünger]

I found this in the smb.conf man page:

The default behavior
 is  to  use  PAM for clear text authentication only
 and to ignore any account  or  session  management.

does this have something to do with your issue.

chris

----- Original Message ----- 
From: "Terry Davis" <tdavis at birddog.com>
To: <samba at lists.samba.org>
Sent: Monday, February 04, 2002 10:23 PM
Subject: [Samba] passwords - windows - clear or hashed over wire?


> Hello,
> 
> I am testing some things and coming up with weird results.
> Here is the scoop:
> 
> I have samba set to:
> unix password sync = yes
> pam password change = yes
> 
> I am trying to test what is going on when I change a user's password 
> from a windows box using the windows password utility.  Here is what 
> happens.
> 
> If I have /etc/pam.d/samba set to:
> auth       required     pam_nologin.so
> auth       required     pam_stack.so service=system-auth
> account    required     pam_stack.so service=system-auth
> session    required     pam_stack.so service=system-auth
> password   required     pam_stack.so service=system-auth
> 
> samba changes the smbpasswd file to update the changes I made in windows 
> to the password.  It stores the passwords hashed as expected.
> 
> If I set /etc/pam.d/samba to:
> auth       required     pam_ldap.so
> account    required     pam_ldap.so
> session    required     pam_ldap.so
> password   required     pam_ldap.so
> 
> then samba changes the password in the ldap server.   This is great!! 
> One problem, it changes the password in ldap to be clear!   How does it 
> do this?  I didn't think windows sent the password accross the wire in 
> the clear.
> 
> Any smart people wanna figure this one out?
> Thank you!
> 
> -- 
> Terry Davis
> Systems Administrator
> BirdDog Solutions, Inc.
> (402) 829-6059
> www.birddog.com
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
>