vampire a win2k-dc

[Andrew Bartlett]

On Wed, 2002-11-20 at 20:44, Guenther Deschner wrote:
> hi volker,
> 
> On Wed, Nov 13, 2002 at 09:53:06AM +0100, Volker Lendecke wrote:
> > On Tue, Nov 12, 2002 at 03:41:47PM +0100, Guenther Deschner wrote:
> > > is it true, that a win2k dc will insist on setting up a secure channel
> > > before ever transmitting password-hashes (with net rpc vampire)? 
> > 
> > Obviously yes. I had to notice that lately. That's where the latest patches
> > from tridge are aimed at. You could try pwdump for the passwords though.
> 
> ok. i see. but isn't there some sort of support for secure channel in tng ?

Not sufficient for this purpose.  Win2k still doesn't disclose the
passwords, and it appears NT and Win2k use a different algorithm between
them.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20021120/45fdd3e4/attachment.bin