We are using samba as our fileserver. And we have a Windows 2000 PDC in place here as well. The PDC is our password server. we have these directives: password server = ip_address_of_win_PDC encrypt passwords = yes And when we use pam_smb to authenticate it is not case sensitive. if I have a password of dOpTog6, doptog6 is just fine. How can I make samba more strict. I tried password level = 24. and that didnt seem to do anything. Thanks, Joe Kezar
Joseph Kezar wrote:> > We are using samba as our fileserver. And we have a Windows 2000 PDC in > place here as well. The PDC is our password server. > > we have these directives: > password server = ip_address_of_win_PDC > encrypt passwords = yes > > And when we use pam_smb to authenticate it is not case sensitive. if I > have a password of dOpTog6, doptog6 is just fine. How can I make samba > more strict. I tried password level = 24. and that didnt seem to do > anything.pam_smb uses lanman passwords, which are not case sensitive. Install winbind and use pam_winbind instead. Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net
We use pam_smb for logins directly into the linux box. However, is my current config using pam_smb as well for SMB sessions? For instance, if you map a drive, and you give windows the credentials to map the drive, this part of samba is not case sensitive. Its this password here we are mainly concerned with. is there a smb.conf directive to use pam_winbind? thanks, Joe Kezar Andrew Bartlett wrote:>Joseph Kezar wrote: > > >>We are using samba as our fileserver. And we have a Windows 2000 PDC in >>place here as well. The PDC is our password server. >> >>we have these directives: >>password server = ip_address_of_win_PDC >>encrypt passwords = yes >> >>And when we use pam_smb to authenticate it is not case sensitive. if I >>have a password of dOpTog6, doptog6 is just fine. How can I make samba >>more strict. I tried password level = 24. and that didnt seem to do >>anything. >> >> > >pam_smb uses lanman passwords, which are not case sensitive. Install >winbind and use pam_winbind instead. > >Andrew Bartlett > > >
Joseph Kezar wrote:> > We use pam_smb for logins directly into the linux box. However, is my > current config using pam_smb as well for SMB sessions? For instance, if > you map a drive, and you give windows the credentials to map the drive, > this part of samba is not case sensitive. Its this password here we are > mainly concerned with.The LM password used by Win9X is not case senstive. This password *may* be used by NT if an NT (unicode, case senstive) password has not been stored.> is there a smb.conf directive to use pam_winbind?pam-winbind is configured seperatly, read the winbind documentation. -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net