NT PDC and Encryption

Greg Dickie greg at discreet.com
Fri Aug 13 11:41:28 GMT 1999


The registry hack only works in user space NOT with trust accounts. To have a
michine on the domain you  **must** enable encrypted passwords on the Samba
server.  No way around it.

Greg

On 13-Aug-99 Matthew Keller wrote:
> "Gerald W. Carter" wrote:
>> 
>> On Thu, 12 Aug 1999, Alex Yu wrote:
>> 
>> > Hello,
>> >
>> > My question is that if I want to use Samba as PDC and use the main
>> > /etc/passwd as a login and password file.  All NT and 98 machines must
>> > change from encryption password scheme to plain text password scheme.
>> > Is it correct?
>> >
>> 
>> For Samba to work as a PDC for NT clients, you **must** enable encrypted
>> passwords on the Samba server.  No way around it.
> 
>       Actually there is a registry hack you can apply to the clients to force
> them to send plaintext, but I don't advise it.
> 
> -- 
> 
>           - Matthew Keller -
>        Lead Programmer/Analyst
>   Distributed Computing and Telemedia
> State University of New York at Potsdam
> 
> Web: http://mattwork.potsdam.edu/
> PGP: http://mattwork.potsdam.edu/crypto/

---------------------------------------------------------------------
Greg Dickie
Just A Guy*
*from discreet (the logic is gone)
Montreal 
(514) 954-7171
greg at discreet.com



More information about the samba-ntdom mailing list