samba - Oct 2019 - user password hash

Rowland, 

Can you test this: 

echo -n $(ldbsearch -H /var/lib/samba/private/sam.ldb -b
'dc=CHANGE_BASE' -s sub
'(&(objectclass=user)(samaccountname=CHANGE_USERNAME))' unicodePwd
|grep unicode |awk '{ print $NF }') | base64 -d -w 0 | iconv -t UTF-8 -f
UTF-16LE

The results are chinees characters.
But if i put it in the example you showed, it shows the correct things. 

Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> L.P.H. van Belle via samba
> Verzonden: donderdag 10 oktober 2019 14:45
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] user password hash
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> > Rowland penny via samba
> > Verzonden: donderdag 10 oktober 2019 14:42
> > Aan: samba at lists.samba.org
> > Onderwerp: Re: [Samba] user password hash
> > 
> > On 10/10/2019 12:55, mj via samba wrote:
> > > Hi Rowland, all,
> > >
> > > On 10/9/19 9:11 AM, Rowland penny via samba wrote:
> > >> You could run something like this on a Samba AD DC:
> > >>
> > >> ldbsearch -H /var/lib/samba/private/sam.ldb -b 
> > >> 'dc=samdom,dc=example,dc=com' -s sub 
> > >> '(&(objectclass=user)(samaccountname=rowland))'
unicodePwd
> > >>
> > >> This will get you a users password, you just need to run 
> > it through 
> > >> the reverse of what I posted earlier to see the actual 
> > users password.
> > >
> > > Out of curiosity I tried that, and wrote the following 
> little bash 
> > > script:
> > >
> > >> PASSWORD="zKY\.Jp4jdiJ\_"
> > >> UNICODEPW_GENERATED="$(echo -n "$PASSWORD" |
iconv -f UTF-8 -t
> > >> UTF-16LE | base64 -w 0)"
> > 
> > I posted:
> > 
> > UNICODEPW=$(echo -n "\"$PASSWORD\"" | iconv -f
UTF-8 -t UTF-16LE |
> > base64 -w 0)
> > 
> > Believe it or not, the two escaped double quotes are a must, 
> > they become 
> > part of the password, AD expects them.
> 
> ... That i did not know also.. 
> 
> 
> > 
> > Rowland
> > 
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
> > 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

On 10/10/2019 13:51, L.P.H. van Belle via samba wrote:
> Rowland,
>
> Can you test this:
>
> echo -n $(ldbsearch -H /var/lib/samba/private/sam.ldb -b
'dc=CHANGE_BASE' -s sub
'(&(objectclass=user)(samaccountname=CHANGE_USERNAME))' unicodePwd
|grep unicode |awk '{ print $NF }') | base64 -d -w 0 | iconv -t UTF-8 -f
UTF-16LE
>
> The results are chinees characters.
Interesting, initially I got 'iconv: illegal input sequence at position 
0' until I added hexdump -e '/1 "%02X"':

echo -n $(ldbsearch -H /var/lib/samba/private/sam.ldb -b 
'dc=samdom,dc=example,dc=com' -s sub 
'(&(objectclass=user)(samaccountname=rowland))' unicodePwd |grep
unicode
|awk '{ print $NF }') | base64 -d -w 0 | hexdump -e '/1
"%02X"' | iconv
-t UTF-8 -f UTF-16LE

I now get the Chinese characters

However, I have tried several times to decode a unicodePwd, but have 
never succeeded ;-)

Rowland

> But if i put it in the example you showed, it shows the correct things.
>
> Greetz,
>
> Louis

Hi,

On 10/10/19 3:35 PM, Rowland penny via samba wrote:
> However, I have tried several times to decode a unicodePwd, but have 
> never succeeded
So, to make sure I understand: while decoding the AD unicodePwd should 
work in theory, it does not work for anyone, in actual practise?

MJ