Samba PDC password sync

Adam Williams awilliam at whitemice.org
Fri Oct 5 06:46:03 GMT 2001


>Last night when I reread the smb.conf man page there were two small passages
>of interest:
>Update encrypted:
>"In order for this parameter to work correctly the encrypt passwords
>parameter must be set to no when this parameter is set to yes."
>Encrypt passwords:
>"...Windows NT 4.0 SP3 and above and also Windows 98 will by default expect
>encrypted passwords unless a registry entry is changed."
>- What is that registry entry?

It is in the Samba tar-ball somewhere if I remember correctly.

>- Should disabling the use of encrypted passwords be done?

No.

> Is is discouraged?

Yes.  Fire up ethereal on a Linux laptop,  and capture everyone's clear
text password.  Sounds like a bad idea to me.  Also your Samba server
looses the ability to DC or handle machine accounts.

>- Password sync worked when I used Webmin with Samba 2.0.x.  How come that
>doesn't work with 2.2.x?

It does,  or as well as it did in 2.0.x.  It is working here.





More information about the samba-ntdom mailing list