sambaPasswordHistory LDAP Attrinbute

[Jeremy Allison]

On Thu, Nov 04, 2004 at 08:51:20AM -0500, Jared Rich wrote:
> Hello All,
> 
> How is the value for sambaPasswordHistory gotten.  The description for the
> attribute says, "Concatenated MD4 hashes of the unicode passwords used on this
> account".... However, I thought MD4 hashes were 32 characters long and
> sambaPasswordHistory is 64 characters for each password.  Also, I thought the
> sambaNTPassword attribute was an MD4 hash, but the hashes in
> sambaPasswordHistory are never the same as those that were in
> sambaNTPassword... What's the deal?

These are salted password hashes, the extra 16 bytes are the salt per hash.

Jeremy.