patch to Samba4 for Win7-beta domain join
abartlet at samba.org
Tue Feb 10 02:09:44 MST 2009
On Tue, 2009-02-10 at 17:38 +1100, tridge at samba.org wrote:
> Hi Andrew,
> As we discussed on IRC, I've pushed a patch
> (fe5b0b595c926aea0916541ceeaf610bc018cb63) to s4 that allows a domain
> join from Win7-beta to work. The patch involves two parts:
> - a small change to fix the dcesrv_netr_DsRGetDCNameEx2 code to cope
> with short domain names, and fix the bogus use of the dnsDomain
> - a hack in password_hash.c to enable setting of machine account
> passwords via a unicodePwd LDAP modify
> The unicodePwd hack is the interesting one. As the commit says:
> This patch copes with the ldap unicodePwd modify by recognising the
> format and creating the correct attributes on the fly. Note that this
> assumes we will never get a unicodePwd attribute set in NT MD4 format
> with the first 2 and last 2 bytes set to 0x22 0x00.
> Andrew Bartlett is looking at a more robust solution, possibly using a
> flag to say that this modify came via ldap, and not internal ldb
> What do you think of this as a temporary solution?
Clearly we need to deal with this properly, but as a first step, this is
a very good thing. I agree the chances of finding an a password where
the MD4 begins and ends with that value seems quite remote.
Authentication Developer, Samba Team http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20090210/6a165e5c/attachment.bin
More information about the samba-technical