[PATCH] calculate extra password hashes and store in supplementalCredentials

Gary Lockyer gary at catalyst.net.nz
Tue May 16 01:35:46 UTC 2017


Revised patch set to generate sha256 and sha512 password hashes and
store them in supplementalCredentials.  Note that multiple instances of
a hash are permitted.

Changes to samba-tool

Changes to virtualCryptSHA256 and virtualCryptSHA512 attributes.
The values are now calculated as follows:
1) If a value exists in 'Primary:userPassword' with
   the specified number of rounds it is returned.
2) If 'Primary:CLEARTEXT, or 'Primary:SambaGPG' with
   '--decrypt-samba-gpg'. Calculate a hash with the specified number of
   rounds
3) Return the first {CRYPT} value in 'Primary:userPassword' with a
   matching algorithm

Comments and review appreciated.
Gary
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0005-idl-drsblobs-add-the-blobs-required-for-Primary-user.patch
Type: text/x-patch
Size: 2526 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/0005-idl-drsblobs-add-the-blobs-required-for-Primary-user.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0006-tests-password_hash-remove-unused-import.patch
Type: text/x-patch
Size: 802 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/0006-tests-password_hash-remove-unused-import.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0007-tests-password_hash-fix-white-space.patch
Type: text/x-patch
Size: 1462 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/0007-tests-password_hash-fix-white-space.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0008-docs-configuration-options-for-extra-passwod-hashes.patch
Type: text/x-patch
Size: 3635 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/0008-docs-configuration-options-for-extra-passwod-hashes.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0009-tests-password_hash-add-tests-for-Primary-userPasswo.patch
Type: text/x-patch
Size: 18866 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/0009-tests-password_hash-add-tests-for-Primary-userPasswo.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0010-password_hash-generate-and-store-Primary-userPasswor.patch
Type: text/x-patch
Size: 11629 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/0010-password_hash-generate-and-store-Primary-userPasswor.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0011-samba-tool-tests-add-tests-for-userPassword.patch
Type: text/x-patch
Size: 18851 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/0011-samba-tool-tests-add-tests-for-userPassword.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0012-samba-tool-add-support-for-userPassword.patch
Type: text/x-patch
Size: 11788 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/0012-samba-tool-add-support-for-userPassword.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170516/cf4c737a/signature.sig>


More information about the samba-technical mailing list