[Samba] getting rid of lmhashes?

Josh Kelley joshkel at gmail.com
Fri Mar 3 22:48:57 GMT 2006


On 3/2/06, Mark Proehl <M.Proehl at science-computing.de> wrote:
> is there a way of disabling the creation of the (insecure) lm-hash in
> the passdb backend of a samba3-pdc?

The standard way to disable LM hashes in a Microsoft shop is to
configure the clients to not save them (Local Security Policy ->
Security Options -> "Network security: Do not store LAN Manager hash
value on next password change").  I don't think they even offer a
server-side option to do so.

It does seem like a useful feature for Samba.

Josh Kelley


More information about the samba mailing list