Passwd case problem

[Simon Hyde]

On Fri, 13 Feb 1998 05:26:02 +1100, you wrote:

>I'm sure this is covered in some doc somewhere, but I have not been able
>to find it. Anyways, I have 1.9.17 running on a SS10/Solaris 2.6. The
>smb.conf is attached at the end of this message. 
>
>Anyways, I need Samba to allow domain logons from Win95 clients, via the
>NIS database on the Sun. We're not doing anything especially tricky, I
>just want the users home directory to mount and for them to be able to
>cancel their print jobs. 
>
>Everything works great IF the user has an all lowercase passwd, 
>e.g. 'passwd'. Numeric characters are also fine.
>
>However, if the passwd contains ANY uppercase characters, 
>e.g. 'PassWd', I get "The domain passwd you supplied is not correct or
>your access to the logon server has been refused". This fails from both
>Win95 OSRA and OSRB clients.
>
>Any ideas or pointers to the docs which I missed would be appreciated.

   password level (G)
Some client/server combinations have difficulty with mixed-case passwords.
One  offending  client  is  Windows  for Workgroups, which for some reason
forces passwords to upper case when using the LANMAN1 protocol, but leaves
them alone when using COREPLUS!

This  parameter defines the maximum number of characters that may be upper
case in passwords.

For example, say the password given was "FRED". If password level  is  set
to  1  (one),  the following combinations would be tried if "FRED" failed:
"Fred", "fred", "fRed", "frEd", "freD". If password level  was  set  to  2
(two),  the  following  combinations  would also be tried: "FRed", "FrEd",
"FreD", "fREd", "fReD", "frED". And so on.

The higher value this parameter is set to the more likely  it  is  that  a
mixed  case  password will be matched against a single case password. How-
ever, you should be aware that use of this parameter reduces security  and
increases the time taken to process a new connection.

A  value of zero will cause only two attempts to be made - the password as
is and the password in all-lower case.

If you find the connections are taking too long with this option then  you
probably  have  a  slow  crypt() routine. Samba now comes with a fast "ufc
crypt" that you can select in the Makefile. You should also make sure  the
PASSWORD_LENGTH   option  is  correct  for  your  system  in  local.h  and
includes.h. On most systems only the first 8 chars of a password are  sig-
nificant  so PASSWORD_LENGTH should be 8, but on some longer passwords are
significant. The includes.h file tries to select the right length for your
system.

Default:
     password level = 0

Example:
     password level = 4

Simon Hyde

-----------------------------------------------------------
With a PC, I always felt limited by the software available.
On Unix, I am limited only by my knowledge.