Samba Password Encryption vs. C209

[Christopher R. Hertel]

The short answer is that there is no standard.

If you study RFC1001/1002 and compare against Samba you will see that we
don't follow spec. there either, particularly with respect to the
handling of group names by the NBNS, implementation of the NBDD, and the
ability to negotiate the use of TCP/137 for transferring truncated name
lists.

The reason Samba doesn't comply is because Microsoft doesn't comply. 
The closest thing to a 'standard' is 'the way Microsoft does it'.

I cannot speak specifically to the encryption issues you raised, but I
assume that they fall into the general category described above.

Chris -)-----

-- 
Christopher R. Hertel -)-----                   University of Minnesota
crh at nts.umn.edu              Networking and Telecommunications Services