search for: machineaccountpw

...more decoding is needed before it can be >> used in the NetworkManager configuration. What are the commands to get >> that done? > People used to do this with tools that read that DB, which is of course > possible, but we have this script: > > > ?./source4/scripting/bin/machineaccountpw > > Note that the password is very random these days. > > But please do be aware that MSCHAPv2 is still NTLMv1 under the hood. > Better than plaintext if you have the certificate checking done > properly, but if you can do real certificates, do that! Thanks Andrew, I run my own...

...t;> can be >>> used in the NetworkManager configuration. What are the commands to get >>> that done? >> People used to do this with tools that read that DB, which is of course >> possible, but we have this script: >> >> >> ??./source4/scripting/bin/machineaccountpw >> >> Note that the password is very random these days. >> >> But please do be aware that MSCHAPv2 is still NTLMv1 under the hood. >> Better than plaintext if you have the certificate checking done >> properly, but if you can do real certificates, do that! > &...

...t; used in the NetworkManager configuration. What are the commands to get >>>> that done? >>> People used to do this with tools that read that DB, which is of course >>> possible, but we have this script: >>> >>> >>> ??./source4/scripting/bin/machineaccountpw >>> >>> Note that the password is very random these days. >>> >>> But please do be aware that MSCHAPv2 is still NTLMv1 under the hood. >>> Better than plaintext if you have the certificate checking done >>> properly, but if you can do real certi...

...d plugging that into wicd's wireless password works very well. Essentially it boils down to: Editing wicd's wireless-settings.conf: identity = host/HOSTNAME.local.domain beforescript = /usr/local/sbin/machine-passwd.sh And then machine-passwd.sh is similar to: password=`/usr/local/sbin/machineaccountpw` wicd-cli -y -n (network-id) --network-property password -s "${password}" (I have a little logic in there to grab the network ID since it changes from time to time.) Then when wicd connects, it presents the username of the machine account and the current machine password, whatever that...

Hi Team, I am currently looking into enterprise wifi with the machine account. I did find some clues on the internet but the peice that is missing is the password of the machine account. Is it possible foor user root to extract that password in clear text from the secrets database where winbind has stored it? /var/lig/samba/private/secrets.tdb? seems to contain the info and tdbdump can

> -----Original Message----- > From: Andrew Bartlett [mailto:abartlet at samba.org] > Sent: Saturday, August 26, 2017 12:38 PM > To: James Zuelow; samba at lists.samba.org > Subject: Re: [Samba] retrieve machine password in current Samba? -- >8 -- snip -- 8< -- > > The recent secrets changes to store the krb5 hashes changed some things to > use a IDL defined NDR