Samba Password Encryption vs. C209

Andrew Edem aedem at kaxis.cx
Thu Jan 25 22:19:09 GMT 2001


My main question is with the modified DES encryption routines. DES is
widely used, and very standard, so why would SMB encryption be different?

-Andrew

On Thu, 25 Jan 2001, Christopher R. Hertel wrote:

> The short answer is that there is no standard.
> 
> If you study RFC1001/1002 and compare against Samba you will see that we
> don't follow spec. there either, particularly with respect to the
> handling of group names by the NBNS, implementation of the NBDD, and the
> ability to negotiate the use of TCP/137 for transferring truncated name
> lists.
> 
> The reason Samba doesn't comply is because Microsoft doesn't comply. 
> The closest thing to a 'standard' is 'the way Microsoft does it'.
> 
> I cannot speak specifically to the encryption issues you raised, but I
> assume that they fall into the general category described above.
> 
> Chris -)-----
> 
> -- 
> Christopher R. Hertel -)-----                   University of Minnesota
> crh at nts.umn.edu              Networking and Telecommunications Services
> 
> 





More information about the samba-technical mailing list