Displaying 1 result from an estimated 1 matches for "cfa95c51f11ab11dc2265b23734e0dac".
2008 Jul 28
4
samba password hashes exposed to ldapsearch
...ctory.fedoraproject.org/wiki/Howto:Samba
... I see that the samba password hashes are shown with a simple ldapsearch
command.
If you scroll to the bottom of the page linked above and see the search
results for:
ldapsearch -x -Z '(uid=testuser)'
You will see the hashes:
sambaLMPassword: CFA95C51F11AB11DC2265B23734E0DAC
sambaNTPassword: B2D88A4A9B0DAEE170E75F67D54918F6
This seems to be confidential information that you would not want
showing in a anonymous LDAP search.
... For the same reason you would not want open permissions on your shadow
password file.
I see that the userPassword hash is not shown in the e...