password API needed

Luke Kenneth Casson Leighton lkcl at switchboard.net
Fri Jun 5 15:08:40 GMT 1998


> }the unix_password_check() function is for clear-text cases; it is
> }completely irrelevant when "encrypted passwords = yes".  likewise,
> }smb_password_check() and smb_password_chal() and also NT domain logins are
> }completely irrelevant when "encrypted passwords = no".
> }
> }what you reckon?  can you write these three functions into huji.c?
> }
> }luke
> 
> 	yes, but shouldn't smb_password_check also supply the session key?

what session key?  session key in my mind means "the Lsa NETLOGON session
key generated by the LsaReqChal and LsaAuth2 calls, which are then used to
sign the LsaSamLogon etc calls)".

do you in fact mean the 8 byte NT LM challenge?



More information about the samba-technical mailing list