sambaPasswordHistory LDAP Attrinbute

Jared Rich jrich at
Fri Nov 5 12:30:03 GMT 2004

Ahhh, I see...  Is the salt random, or is there a way to compute what it is
from the hash of it?  Thanks.


Jeremy Allison (jra at wrote:
> On Thu, Nov 04, 2004 at 08:51:20AM -0500, Jared Rich wrote:
> > Hello All,
> >
> > How is the value for sambaPasswordHistory gotten.  The description for the
> > attribute says, "Concatenated MD4 hashes of the unicode passwords used on this
> > account".... However, I thought MD4 hashes were 32 characters long and
> > sambaPasswordHistory is 64 characters for each password.  Also, I thought the
> > sambaNTPassword attribute was an MD4 hash, but the hashes in
> > sambaPasswordHistory are never the same as those that were in
> > sambaNTPassword... What's the deal?
> These are salted password hashes, the extra 16 bytes are the salt per hash.
> Jeremy.

More information about the samba-technical mailing list