[Samba] retrieve machine password in current Samba?

[IT Support]

Many thanks Andrew, that's perfect! Will try it out next week.

Best wishes,
Alex

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: 24 November 2017 02:04
To: IT Support <itsupport at biopharmaspec.com>; samba at lists.samba.org
Cc: Gary Lockyer <gary at catalyst.net.nz>
Subject: Re: [Samba] retrieve machine password in current Samba?

On Tue, 2017-11-21 at 15:59 +0000, IT Support via samba wrote:
> On Thu Sep 7 23:41:01 UTC 2017, Andrew Bartlett via samba wrote:
> >
> > I've looked into this, and I don't think we have changed the format,
> > it is just that we stopped keeping to ascii and small lengths for
> > the passwords.  That flood of binary stuff is really the password!
> >
> > So, the tdbdump output is still correct, but do you have to
> > un-escape it.
> >
> > Otherwise, the attached script will print it on stdout, if you like
> > it and it works for you I can drop it in source4/scripting/bin for
> > posterity.
>
> Greetings,
>
> Sorry to jump on an old thread, but have just stumbled across this and
> would also find such a script useful. AFAICT, the attachment mentioned
> above isn't available to download from the mailing list archive.
>
> Please could you direct me to where I can find a copy please? Have
> checked source4/scripting/bin, but not sure the file name and doesn't
> appear to be in master, would it be in a specific branch?

Here is is.  I need to write a test before it can get into master (or co-opt Gary into doing it ;-)

There is also a mymachinepw script there, but that would only work on the AD DC, not on a member server.

Andrew Bartlett

--
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT
https://catalyst.net.nz/services/samba



________________________________
Information in this email and any attachments is confidential and intended solely for the use of the individual(s) to whom it is addressed. Please note that any views or opinions presented in this email are solely those of the sender and do not necessarily represent those of BioPharmaSpec. BioPharmaSpec Group services are carried out under the respective company’s Standard Terms and Conditions, which are available on request.