AIX 5.2 Samba 3.0.6 the smbpasswd file is showing only the nt (second) hash after a machine join. the lm hash (first) is all X's. is this expected? I also noticed in LDAP that this was the case on password changes for users. has the LM hash been dropped? Bill
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 William Jojo wrote: | | AIX 5.2 | Samba 3.0.6 | | the smbpasswd file is showing only the nt (second) hash | after a machine join. the lm hash (first) is all X's. | | is this expected? yes. machine accounts don't use the lanman hash. | I also noticed in LDAP that this was the case | on password changes for users. | | has the LM hash been dropped? Nope. But the LM hashed should be X'd only if the password selected was more than 14 characfters. (this is how I remember it at least). If I'm wrong, Andrew can fill in the blanks. cheers, jerry - --------------------------------------------------------------------- Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBKgFJIR7qMdg1EfYRApi/AJ0bPbylvPDisvUk7oananvb9ZrP3gCg6pGV e50lU47D5W4VDuCCnEz3Ni8=76it -----END PGP SIGNATURE-----
On Tue, 2004-08-24 at 00:12, William Jojo wrote:> AIX 5.2 > Samba 3.0.6 > > > the smbpasswd file is showing only the nt (second) hash after a machine > join. the lm hash (first) is all X's. > > is this expected? > > I also noticed in LDAP that this was the case on password changes for > users. > > has the LM hash been dropped?Yes. For machines, it doesn't get set for a number of reasons, and for machines, it is also never read. As we moved to allow the same for users (where they have 'long' passwords, > 14 chars), I cleaned up the machine password change code at the same time. Andrew Bartlett -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20040824/4b00a49c/attachment.bin