Kevin, Firstly, you need to obtain the DES libraries. Then you need to tell the Samba Makefile that you wish to compile in DES encryption services and link with the DES library. Then in the smb.conf file you need to add to the [Globals] section: encrypted passwords = yes Then you need to create a separate smbpasswd file. Please read the documentation in the docs directory of the Samba source distribution. Samba-1.9.17alpha5 was released two days ago and has significantly improved (in volume and in currency) documentation. The Samba Team have been wrestling with the implications of Microsoft's move away from allowing use of clear text passwords by default. While we recognise that clear text password handling can be reenabled by making appropriate registry changes to Windows NT and 95 there has been a strong reaction from the samba using community. We would like to make life easy for all concerned by shipping samba with DES support as default. This is NOT possible due to laws in the USA as well as other countries. Encryption technology is classified as a munition and comes under export prohibitions. The alternative you can consider is to use a Windows NT server as your password server. You can then still run Samba with the following entry in your smb.conf file [Globals] serction: security = server password server = "your NT server name" domain controller = "your NT server IP address" The above causes Samba to refer all authentication requests to the nominated NT server. I hope this little contribution helps one or more of our valued Samba users. Kind regards, John H Terpstra - The Samba Team <samba-bugs@samba.anu.edu.au> -----Original Message----- From: Kevin A. Pieckiel [SMTP:kapieckiel@Harding.edu] Sent: Thursday, 31 July 1997 22:32 To: Red Hat Mailing List Subject: Encryption How do you enable DES encryption in Samba? Turning off encryption on all out NT/95 boxes is not an option. Thanks! Kevin A. Pieckiel
hi Samba team... my problem is the next when create smbpasswd doing cat /etc/passwd | mksmbpasswd.sh > /usr/local/samba/private/smbpasswd this tell me "permission denied" why is the cause?, what can i do? thks and sorry for my english Sodero -------------- next part -------------- HTML attachment scrubbed and removed
On Tue, 25 Jul 2000, sodero wrote:> when create smbpasswd doing cat /etc/passwd | mksmbpasswd.sh > /usr/local/samba/private/smbpasswd this tell me "permission denied" > why is the cause?, what can i do?Permissions on /usr/local/samba/private are normally set such that only root can access the directory (this is necessary for proper security). Did you su to root before trying to create the smbpasswd file? Regards, -- Neil Hoggarth Departmental Computer Officer <neil.hoggarth@physiol.ox.ac.uk> Laboratory of Physiology http://www.physiol.ox.ac.uk/~njh/ University of Oxford, UK
I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I basically have an open samba system. I do not have encryption support compiled into the binaries. I have looked high and low for the instructions, Will any one tell me which changes to make in the make file in order to get the encryption support compiled into the binary? When and how or do I need to get the Smbpassword going?? Why is there so much of the old documentation included with the samba files and so little regarding getting the encryption going? The encryption config should be the default. -- Howard Huntley Jr. MCP, MCSE Micro-Computer Systems Specialist
I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I basically have an open samba system. I do not have encryption support compiled into the binaries. I have looked high and low for the instructions, Will any one tell me which changes to make in the make file in order to get the encryption support compiled into the binary? When and how or do I need to get the Smbpassword going?? Why is there so much of the old documentation included with the samba files and so little regarding getting the encryption going? The encryption config should be the default. -- Howard Huntley Jr. MCP, MCSE Micro-Computer Systems Specialist
On Tue, 5 Nov 2002, Howard Huntley Jr wrote:> I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I > basically have an open samba system. I do not have encryption support > compiled into the binaries. I have looked high and low for the > instructions, Will any one tell me which changes to make in the make > file in order to get the encryption support compiled into the binary? > > When and how or do I need to get the Smbpassword going?? > > Why is there so much of the old documentation included with the samba > files and so little regarding getting the encryption going? The > encryption config should be the default. >Please check the man page for smb.conf - it is up to date. You want to check for "encrypt passwords = Yes" function in smb.conf. - John T. -- John H Terpstra Email: jht@samba.org
I compiled the source, My understand is that the encryption support has to be compiled into the binary. If not the "encrypt passwords = Yes" function in smb.conf. is meaning less, ----- Original Message ----- From: "John H Terpstra" <jht@samba.org> To: "Howard Huntley Jr" <hhuntleyjr@attbi.com> Cc: <samba@samba.org> Sent: Monday, November 04, 2002 11:27 PM Subject: Re: [Samba] Encryption> On Tue, 5 Nov 2002, Howard Huntley Jr wrote: > > > I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I > > basically have an open samba system. I do not have encryption support > > compiled into the binaries. I have looked high and low for the > > instructions, Will any one tell me which changes to make in the make > > file in order to get the encryption support compiled into the binary? > > > > When and how or do I need to get the Smbpassword going?? > > > > Why is there so much of the old documentation included with the samba > > files and so little regarding getting the encryption going? The > > encryption config should be the default. > > > > Please check the man page for smb.conf - it is up to date. You want to > check for "encrypt passwords = Yes" function in smb.conf. > > - John T. > -- > John H Terpstra > Email: jht@samba.org > >
On Tue, 5 Nov 2002, Howard Huntley Jr. wrote:> I compiled the source, My understand is that the encryption support has to > be compiled > into the binary. If not the "encrypt passwords = Yes" function in smb.conf. > is meaning less,No. Encryption support is native to Samba since version 2.0.x. You need to add your root account to smbpasswd: smbpasswd -a root then do the same for every user who needs to use samba. - John T.> > > ----- Original Message ----- > From: "John H Terpstra" <jht@samba.org> > To: "Howard Huntley Jr" <hhuntleyjr@attbi.com> > Cc: <samba@samba.org> > Sent: Monday, November 04, 2002 11:27 PM > Subject: Re: [Samba] Encryption > > > > On Tue, 5 Nov 2002, Howard Huntley Jr wrote: > > > > > I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I > > > basically have an open samba system. I do not have encryption support > > > compiled into the binaries. I have looked high and low for the > > > instructions, Will any one tell me which changes to make in the make > > > file in order to get the encryption support compiled into the binary? > > > > > > When and how or do I need to get the Smbpassword going?? > > > > > > Why is there so much of the old documentation included with the samba > > > files and so little regarding getting the encryption going? The > > > encryption config should be the default. > > > > > > > Please check the man page for smb.conf - it is up to date. You want to > > check for "encrypt passwords = Yes" function in smb.conf. > > > > - John T. > > -- > > John H Terpstra > > Email: jht@samba.org > > > > > >-- John H Terpstra Email: jht@samba.org