passwords S4

[Arvid Requate]

Hi Collen,

> so if i do a 'base64 -d' on the output data of unicodepwd in bash
> i get the ntpassword hash ?!

yes, in binary. You may want to hexdump it:

| base64 -d | hexdump -e '/1 "%02X"'

Cheers,
Arvid

Quoting post by Collen sent 09.12.2011
> Hi Jelmer,
> 
> no no no, i wasn't looking for the plain text password.
> just how to get the unicodepwd data valid.
> 
> so if i do a 'base64 -d' on the output data of unicodepwd in bash
> i get the ntpassword hash ?!
> 
> cheers, Collen.
> 
> On 9-12-2011 16:03, Jelmer Vernooij wrote:
> > Am 09/12/11 15:02, schrieb Collen:
> >> i'm trying to make a dump of the passwords (and user accounts) in samba4
> >> 
> >> i can dump them with ldbsearch and unicodePwd
> >> 
> >> in what format is the unicodePwd ? i thought it was base64 + utf16le
> > 
> > It'll give you the NT password hash, not a plaintext password. ldbsearch
> > outputs binary data it in base64 by default.
> > 
> >> but decoding base64 and converting with iconv gives me nothing (an
> >> error)
> >> 
> >> how can i dump the password, and convert it to something useable ?
> > 
> > The plaintext password isn't stored unless you have a clearTextPassword
> > attribute.
> > 
> > Cheers,
> > 
> > Jelmer
-- 
Arvid Requate
Open Source Software Engineer

Univention GmbH
Linux for your business
Mary-Somerville-Str.1
28359 Bremen
Tel. : +49 421 22232-0
Fax : +49 421 22232-99

requate at univention.de
http://www.univention.de

Geschäftsführer: Peter H. Ganten
HRB 20755 Amtsgericht Bremen
Steuer-Nr.: 71-597-02876