SAMBA digest 2009: NT Workstation "Default" Username and

[Sigmund Skjelnes]

Hi! And thank you for this very useful tip! 

I did what you suggested, and it worked, I'm not prompted for password on
logon to the linux server any more. I were'nt aware that I'd had to assign
an smb password, I thought it was Ok as I'd had the samme username on the
linux server  as I had on the NT box, with the security = user statement in
the smb.conf. 

Best regards, Sigmund.

At 22:56 08.03.99 +0100, you wrote:
>On Mon, Mar 08, 1999 at 09:48:00AM +1100, Sigmund Skjelnes wrote:
>> Hi!
>> This is because NT and Samba don't understand each others encryption, plain
>> password must be used. The NT service pack 3 makes an change in the system,
>> so encrypted passwors are always tried first. To make it use plain
>> passwords at all, a registry edition is required. Hence you get it thorugh
>> on the second attempt, this is done on your NT. It seems not possible to
>> make NT and Samba talk the same language on encrypted passwords, maybe
>> someone out there have an solution?
>Hi
>
>IMHO NT will never send your username/password cleartext to ANY server,
>without prompting you (at least after sp3). This is an important security
>feature - it was possible to for example create a web-page which links to an
>smb-server (<a href="//server/share/file....">...), and nt would send your
>"secret" password to this server... NOT GOOD!
>
>NT can easily use samba with encrypted passwords. Just ass "encrypted
>passwords = yes" (or similar) to your smb.conf. Then add the users you need
>to your smbpasswd (as root with smbpasswd -a <username>). This was it. You
>can now disable only clear-text related registry entries on your nt-box.
>
>                                      greetings, Florian Pflug
>
>