Question about security

[Cole, Timothy D.]

Under your configuration, all the Samba ever sees are the LM and NT password
hashes, which is no different than what an NT server sees.

> -----Original Message-----
> From:	JONATHAN W MINER [SMTP:Jonathan.W.Miner at lmco.com]
> Sent:	Tuesday, June 06, 2000 12:44
> To:	Multiple recipients of list SAMBA-NTDOM
> Subject:	Question about security
> 
> Someone within my company expressed the follow view:
> 
> > I was told that Unix servers running SAMBA can display NT passwords in
> > clear text when they provide file sharing services for NT
> > workstations.  Was a determination ever made if we allow this type of
> > system to access the enterprise NT domain controllers?
> 
> Can someone clarify this statement.  Here is the [global] section from
> by smb.conf file if that matters at all.  I'm running 2.0.6 on both
> Solaris and HP-UX boxes.
> 
> [global]
>         workgroup = DOMAIN
>         security = SERVER
>         password server = ntpdc1
>         os level = 0
>         wins server = ntwins1
> 
> Thanks alot!
> -- 
> Jonathan Miner - Lockheed Martin EIS/SAI
> LM-Xpress: jonathan.w.miner at lmco.com
> Phone: 603 885 UNIX - Fax: 603 885 3850
> USmail: PO Box 868, NCA01-3719, Nashua, NH 03061-0868