sambaPasswordHistory LDAP Attrinbute

Jeremy Allison jra at
Thu Nov 4 17:59:53 GMT 2004

On Thu, Nov 04, 2004 at 08:51:20AM -0500, Jared Rich wrote:
> Hello All,
> How is the value for sambaPasswordHistory gotten.  The description for the
> attribute says, "Concatenated MD4 hashes of the unicode passwords used on this
> account".... However, I thought MD4 hashes were 32 characters long and
> sambaPasswordHistory is 64 characters for each password.  Also, I thought the
> sambaNTPassword attribute was an MD4 hash, but the hashes in
> sambaPasswordHistory are never the same as those that were in
> sambaNTPassword... What's the deal?

These are salted password hashes, the extra 16 bytes are the salt per hash.


More information about the samba-technical mailing list