Displaying 1 result from an estimated 1 matches for "b2d88a4a9b0daee170e75f67d54918f6".
2008 Jul 28
4
samba password hashes exposed to ldapsearch
...e that the samba password hashes are shown with a simple ldapsearch
command.
If you scroll to the bottom of the page linked above and see the search
results for:
ldapsearch -x -Z '(uid=testuser)'
You will see the hashes:
sambaLMPassword: CFA95C51F11AB11DC2265B23734E0DAC
sambaNTPassword: B2D88A4A9B0DAEE170E75F67D54918F6
This seems to be confidential information that you would not want
showing in a anonymous LDAP search.
... For the same reason you would not want open permissions on your shadow
password file.
I see that the userPassword hash is not shown in the example above. In my
tests, I only see this Unix p...