lanman pwd hash (Re: [SCM] Samba Shared Repository - branch master updated)

Stefan (metze) Metzmacher metze at samba.org
Wed Jun 23 00:56:46 MDT 2010


Hi Matthias,

> commit 0e637be43b584aef9f5101d15ae5bdc1172c5502
> Author: Matthias Dieter Wallnöfer <mdw at samba.org>
> Date:   Mon Jun 21 19:40:50 2010 +0200
> 
>     s4:password_hash LDB module - fix another problem regarding the lanman hash
>     
>     When a user only provides only the lanman hash (and nothing else) and the
>     lanman authentication is deactivated then we end in an account with no
>     password attribute at all! Lock this down.

I think the correct behavior is to reject the password change in that case.

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100623/a11816c8/attachment.pgp>


More information about the samba-technical mailing list