sambaPasswordHistory LDAP Attrinbute

[Jared Rich]

Ahhh, I see...  Is the salt random, or is there a way to compute what it is
from the hash of it?  Thanks.

Jared


Jeremy Allison (jra at samba.org) wrote:
>
> On Thu, Nov 04, 2004 at 08:51:20AM -0500, Jared Rich wrote:
> > Hello All,
> >
> > How is the value for sambaPasswordHistory gotten.  The description for the
> > attribute says, "Concatenated MD4 hashes of the unicode passwords used on this
> > account".... However, I thought MD4 hashes were 32 characters long and
> > sambaPasswordHistory is 64 characters for each password.  Also, I thought the
> > sambaNTPassword attribute was an MD4 hash, but the hashes in
> > sambaPasswordHistory are never the same as those that were in
> > sambaNTPassword... What's the deal?
>
> These are salted password hashes, the extra 16 bytes are the salt per hash.
>
> Jeremy.
>