Smbpasswd and Mixed-case passwords

[Gerald Carter]

werner maes wrote:
> 
> Hello,
> 
> Apparently the smbpasswd file doesn't care about 
> mixed-case passwords. I've entered smbpasswd and 
> changed my password to: MaEs. Then I did: 
> smbclient //server/share -U werner and provided the wright
> password: MaEs. I managed to get access.
> BUT when I entered "maes" as password, it also 
> worked. Same story with MAEs.


You will see this message in your smbd logs.

   NT Password did not match for user <username>' ! 
	Defaulting to Lanman

The reason your login succeeds is that smbclient sends 
both the LanMan and NT hash in the SMBsessetup request
when the protocol negotiated is NT LANMAN 1.0.  The LanMan
hash is case insensitive due to the hashing algorithm
so when the NT hash fails, Samba drops back to 
checking the LanMan hash.







Cheers, jerry
----------------------------------------------------------------------
   /\  Gerald (Jerry) Carter                     Professional Services
 \/    http://www.valinux.com/  VA Linux Systems   gcarter at valinux.com
       http://www.samba.org/       SAMBA Team          jerry at samba.org
       http://www.plainjoe.org/                     jerry at plainjoe.org

       "...a hundred billion castaways looking for a home."
                                - Sting "Message in a Bottle" ( 1979 )