I've jsut installed Samba-2.2.4, from source on a Solaris 2.6 box.
I'm looking to upgrade from some 2.0.x versions I'm running.
I've createed a password entry using smbpasswd -a and added my password.
My password has 9 characters in it. Using smbclient on the Solaris box, I
can access the share, but I can't from Win95 or Win2000 clients
(encryption is on).
If I try to access using only the first 8 characters from my password
(without changing the password on the server) it works on all three
platforms.
I then copied the password hashes (just the two hashes, not the whole old
format line)from my 2.0.3 server password file, and it works properly on
all platforms with the 9 character password.
I haven't got any of the password synchronisation stuff turned on, just a
basic test setup (conf file below).
I've tried increasing the values of PASSWORD_LENGTH in
source/include/includes.h
and recompiling, but it hasn't helped. There appears to be something
truncating my password before the hashes are created in the smbpasswd
file.
Does anyone who knows the source better than me know how to patch this
out?
Cheers
Carl
% more ../lib/smb.conf
# Samba config file.
# Global parameters
[global]
workgroup = FRUIT
netbios name = APPLE
domain master = no
encrypt passwords = Yes
lmannounce = no
local master = no
syslog only = yes
log level = 0
invalid users = root
# password level = 10
[TEST]
comment = Test share service points at /tmp
path = /tmp
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Carl Vincent http://www.netskills.ac.uk/ (URL)
Software, Systems and Webmaster 0191 222 5003 (voice)
NETSKILLS - Quality Internet Training 0191 222 5001 (fax)
PGP fingerprint: 5522 ADAF F6BF 897A 1529 B035 D4F6 AE5F B6EF C289
On Fri, 24 May 2002, Carl Vincent wrote:> I've jsut installed Samba-2.2.4, from source on a Solaris 2.6 box. > I'm looking to upgrade from some 2.0.x versions I'm running. > > I've createed a password entry using smbpasswd -a and added my password. > My password has 9 characters in it. Using smbclient on the Solaris box, > I can access the share, but I can't from Win95 or Win2000 clients > (encryption is on). If I try to access using only the first 8 characters > from my password (without changing the password on the server) it works > on all three platforms.Probably Solaris' getpass() routine or something we use. I'll add it to my list of stuff to look at when I can. cheers, jerry --------------------------------------------------------------------- Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org -- http://www.plainjoe.org "Sam's Teach Yourself Samba in 24 Hours" 2ed. ISBN 0-672-32269-2 --"I never saved anything for the swim back." Ethan Hawk in Gattaca--
> > On Fri, 24 May 2002, Carl Vincent wrote: > > > > > I've jsut installed Samba-2.2.4, from source on a Solaris 2.6 box. > > > I'm looking to upgrade from some 2.0.x versions I'm running. > > > > > > I've createed a password entry using smbpasswd -a and added > > my password. > > > My password has 9 characters in it. Using smbclient on the > > Solaris box, > > > I can access the share, but I can't from Win95 or Win2000 clients > > > (encryption is on). If I try to access using only the first > > 8 characters > > > from my password (without changing the password on the > > server) it works > > > on all three platforms. > > > > Probably Solaris' getpass() routine or something we use. > > I'll add it to > > my list of stuff to look at when I can.On Solaris only the first 8 characters are significat when it comes to passwords. He'll just forget everything else. Had the same behaviour on Solaris 2.7 You can find that somewhere in the man page of passwd (if i'm not mistaken). my guess would be that win95-2k encrypts the password using all the characters and solaris will only use the first 8 during the encryption.. HTH, Marc GRIETENS Marc.Grietens@eu.sony.com *********************************************************************************************** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony United Kingdom Limited. (04) ***********************************************************************************************