[Samba] Are passwords encrypted when pam_winbind.so is used for authentication

[Buchan Milne]

> Message: 20
> From: "Sarris, Chris" <Chris_Sarris at csgsystems.com>
> To: "'samba at lists.samba.org'" <samba at lists.samba.org>
> Date: Tue, 19 Mar 2002 13:49:38 -0700
> Subject: [Samba] Are passwords encrypted when  pam_winbind.so is used for authenti
>  cation
> 
> Hello,
> Are passwords encrypted when I use winbind in conjuction with modifying the
> /etc/pam.d/login / kde / gdm / ssh configuration scripts?

Yes.

> 
> I can log into KDE or into a separate tty session on my Linux box with a
> Win2000 domain member with winbind...Winbind is working excellently.
> However, I am wondering if this is clear text or encrypted. It should be
> encrypted to work with Win 2000 but a How To document that I read seem to
> say that Samba ignores Pam when encrypt passwords = yes. 
> 

This has nothing to do with winbind. Samba does not use winbind directly 
(AFAIK).

> I have "encrypt passwd=yes" in the smb.conf file. I have a Red Hat Linux 7.2
> client in a Win 2000 / NT domain and have used winbind to get user and group
> information successfully. Are my domain passwords going back and forth
> Encrypted or Not?
> 

AFAIK, it's impossible to have clear-text passwords in an SMB domain.

Buchan



-- 
|----------------Registered Linux User #182071-----------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                       http://ranger.dnsalias.com/gpg.key