passwords S4

[Collen]

Hi, thx!

funny, i just figured out that it was hex (-:
but did not have the correct hexdump syntax.
at the same time u mailed ...

now i do. thanx.

Collen



On 14-12-2011 12:13, Arvid Requate wrote:
> Hi Collen,
>
>> so if i do a 'base64 -d' on the output data of unicodepwd in bash
>> i get the ntpassword hash ?!
>
> yes, in binary. You may want to hexdump it:
>
> | base64 -d | hexdump -e '/1 "%02X"'
>
> Cheers,
> Arvid
>
> Quoting post by Collen sent 09.12.2011
>> Hi Jelmer,
>>
>> no no no, i wasn't looking for the plain text password.
>> just how to get the unicodepwd data valid.
>>
>> so if i do a 'base64 -d' on the output data of unicodepwd in bash
>> i get the ntpassword hash ?!
>>
>> cheers, Collen.
>>
>> On 9-12-2011 16:03, Jelmer Vernooij wrote:
>>> Am 09/12/11 15:02, schrieb Collen:
>>>> i'm trying to make a dump of the passwords (and user accounts) in samba4
>>>>
>>>> i can dump them with ldbsearch and unicodePwd
>>>>
>>>> in what format is the unicodePwd ? i thought it was base64 + utf16le
>>>
>>> It'll give you the NT password hash, not a plaintext password. ldbsearch
>>> outputs binary data it in base64 by default.
>>>
>>>> but decoding base64 and converting with iconv gives me nothing (an
>>>> error)
>>>>
>>>> how can i dump the password, and convert it to something useable ?
>>>
>>> The plaintext password isn't stored unless you have a clearTextPassword
>>> attribute.
>>>
>>> Cheers,
>>>
>>> Jelmer

-- 
---
Collen Blijenberg - systeem/netwerk beheerder