Problem with PAM-based authentication

Kris Van Hees aedil at alchar.org
Tue Nov 12 22:28:01 GMT 2002


Hi,

	It seems that PAM-based authentication is broken in the current CVS
HEAD version.  Enabling cleartext passwords, and setting 'encrypted passwords =
no' does not help, nor does setting 'use spnego = no'.  What seems to happen
is that the client (Win98SE and WinXP tested) sends the passwords as a UNICODE
string, with its length set in smb_vwv[8], whereas on 2.2.6 (to doublecheck)
the password was being sent as a regular ASCII string with its length set in
smb_vwv[7].

	In both cases the protocol negotation decided upon 'NT LM 0.12'.

	Does anyone have any ideas what is going wrong here?  Is the CVS HEAD
version sending any negotiation information that might trigger the client to
send the password as an NT password rather than an LM password?

	Kris



More information about the samba-technical mailing list