Samba Passwords >8 characters? (Samba 2.2 CVS, Solaris 7, Win2K client)

Don S. Rogers Don_Rogers at brown.edu
Thu Feb 22 18:21:13 GMT 2001


Howdy, Samba folks.

I am currently testing an installation of yesterday's CVS Samba 2.2 on a
Solaris 7 Sparc box to eventually replace our Samba 2.0.6/Linux setup.
Our test clients are Win2K Pro, base install. 

So far, all is fairly happy and healthy on PDC support and file serving.
Haven't tested print services yet. However, we are having a problem with
Samba passwords:

All works fine if the Samba password is 8 characters long or less. If
it's any longer, though, then Win 2K does not accept the login. If I try
to use the long password, it gives me this error:

	The system cannot log you on due to the following error:
	The stub received bad data.
	Please try again...

If I manually truncate the password to only the first 8 characters, then
I can authenticate normally.

Further, when testing the Samba shares with smbclient, I find that it
only cares about the first 8 characters in the login password. If the
actual password I set with smbpasswd is 14 characters, for example, then
I can authenticate via smbclient using the first (valid) 8 characters of
the password plus any quantity of gibberish after.

We hope to retain passwords up to 14 characters for compatibility with
other campus network services.

Any ideas? I thought there might be a compile-time configuration option
that would help, but I can't determine which one. Also, I couldn't find
any related notes in the archives.

I should mention that Solaris on this box exhibits the same behavior --
only the first 8 characters in the Unix password matter for
authentication. Is this actually an OS issue that impacts Samba, or does
Samba have its own limitation? 

Thanks!

Don

-- 
 Don S. Rogers  .  Department Computing Coordinator
 Brown University  .  Sociology  .  Population Studies
 Social Science Research Lab  .  http://www.ssrl.brown.edu
 phone 401.863.2550  .  fax 401.863.3213




More information about the samba-ntdom mailing list