Karl DeBisschop
2004-Jan-27 17:45 UTC
[Samba] Does winbindd/pam transmit cleartext authneticating against an NT PDC
I'm being told that when winbindd is used to connect a Linux client to an NT PDC, that encrypted passwords cannot be used in transport. In other words that passwords are sent over the wire in clear text. I find this surprising. Nor can i find documentation of this assertion anywhere. Can anyone definitively say this is true or false? Thanks. -- Karl DeBisschop <kdebisschop@alert.infoplease.com> Pearson Education/Information Please
Jeremy Allison
2004-Jan-27 18:36 UTC
[Samba] Does winbindd/pam transmit cleartext authneticating against an NT PDC
On Tue, Jan 27, 2004 at 12:44:34PM -0500, Karl DeBisschop wrote:> I'm being told that when winbindd is used to connect a Linux client to > an NT PDC, that encrypted passwords cannot be used in transport. In > other words that passwords are sent over the wire in clear text. > > I find this surprising. Nor can i find documentation of this assertion > anywhere. Can anyone definitively say this is true or false?Definitively this is false. winbindd uses the same methods as a Windows member server to enumerate accounts. No cleartext. Jeremy.