[Samba] Windows XP and plain text password

[John H Terpstra]

On Wed, 12 Mar 2003, Kenny Mann wrote:

> I have yet to find samba for QNX with encpryption nor do I have the time
> to port it.
> If perhaps you know of a location (and I have tried google, although
> only for a short search), I would be more than happy to listen however
> that is the only method that I know.
>
> BTW, IF someone enabled plaintextpassword's does that mean that ALL of
> there passwords are plaintext or just any that can't be encrpyted?

Re-enabling plain text password support by the registry change does NOT
disable encrypted password support at all. It just re-enables plain text
based authentication.

MS Windows clients do NOT cache the plain text password, only the
encrypted password. So if you do not enable encrypted passwords on Samba
then when the MS Windows client drops a connection and later tries to
restore the connection, this later re-connect can only send the encrypted
password which will fail if you do not have this enabled in samba. The
result then will be a blue kiss of death screen on the client.

To enable encrypted passwords in samba: In smb.conf [globals] put:
	encrypted password = Yes

Then for each of your users:
	smbpasswd -a 'usern_name'

For some time now samba compiles in encrypted password ability, you just
need to enable it as per above.

- John T.

>
> THANKS!
>
> --KM
>
> > -----Original Message-----
> > From: Andrew Bartlett [mailto:abartlet at samba.org]
> > Sent: Wednesday, March 12, 2003 3:55 PM
> > To: Kenny Mann
> > Cc: John H Terpstra; Sacha HAEGELIN; samba at lists.samba.org
> > Subject: RE: [Samba] Windows XP and plain text password
> >
> >
> > On Thu, 2003-03-13 at 05:01, Kenny Mann wrote:
> > > Samba built for OS's such as QNX do not have the encryption
> > > capability. You must have plain text turned on. Perhaps he
> > is in the
> > > same position.
> >
> > Why?  It's certainly not a code-size issue, as there are much
> > bigger parts of samba...
> >
> > It seems a pretty lame excuse for almost complete
> > incompatibility with out-of-the-box installations.
> >
> > Andrew Bartlett
> >
> > --
> > Andrew Bartlett                                 abartlet at pcug.org.au
> > Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
> > Student Network Administrator, Hawker College   abartlet at hawkerc.net
> > http://samba.org     http://build.samba.org     http://hawkerc.net
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
John H Terpstra
Email: jht at samba.org