Sarris, Chris
2002-Mar-19 15:23 UTC
[Samba] Are passwords encrypted when pam_winbind.so is used for authenti cation
Hello, Are passwords encrypted when I use winbind in conjuction with modifying the /etc/pam.d/login / kde / gdm / ssh configuration scripts? I can log into KDE or into a separate tty session on my Linux box with a Win2000 domain member with winbind...Winbind is working excellently. However, I am wondering if this is clear text or encrypted. It should be encrypted to work with Win 2000 but a How To document that I read seem to say that Samba ignores Pam when encrypt passwords = yes. I have "encrypt passwd=yes" in the smb.conf file. I have a Red Hat Linux 7.2 client in a Win 2000 / NT domain and have used winbind to get user and group information successfully. Are my domain passwords going back and forth Encrypted or Not? thanks, Chris
Andrew Bartlett
2002-Mar-20 13:18 UTC
[Samba] Are passwords encrypted when pam_winbind.so is used for authentication
"Sarris, Chris" wrote:> > Hello, > Are passwords encrypted when I use winbind in conjuction with modifying the > /etc/pam.d/login / kde / gdm / ssh configuration scripts? > > I can log into KDE or into a separate tty session on my Linux box with a > Win2000 domain member with winbind...Winbind is working excellently. > However, I am wondering if this is clear text or encrypted. It should be > encrypted to work with Win 2000 but a How To document that I read seem to > say that Samba ignores Pam when encrypt passwords = yes. > > I have "encrypt passwd=yes" in the smb.conf file. I have a Red Hat Linux 7.2 > client in a Win 2000 / NT domain and have used winbind to get user and group > information successfully. Are my domain passwords going back and forth > Encrypted or Not?Yes, all passwords are encrypted between winbindd and the PDC. Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net