Patches to head (become_root and some RPC stuff)

Luke Kenneth Casson Leighton lkcl at switchboard.net
Tue Aug 24 21:56:35 GMT 1999


On Wed, 25 Aug 1999, Michael Stockman wrote:

> > > I don't know LDAP, so please, could you tell me how the LDAP
> server is
> > > secured, because that is the key to what smbd is doing wrong.
> > >
> >
> > the ldap server should be run on loopback or over an sshd-proxy to
> the
> > ldap server.  in either case, the connection from samba should be to
> > 127.0.0.1
> 
> That is good. What may have been unclear is that I really asked how
> the contents of the LDAP databas (I suppose it is) are secured,
> especially in Dougs server.

they are not [secured].  user password NT and LM hashes are transmitted
in-the-clear.



More information about the samba-technical mailing list