Displaying 20 results from an estimated 5000 matches similar to: "Samba4 as AD, what password hash is used?"
2015 Jun 18
2
Samba4 as AD, what password hash is used?
Hi,
Thank you for this answer, unfortunately I was not able to re-hash password
as they are hashed into LDB database.
First I retrieved the hash:
ldbsearch -H $sam '(cn=some user)' unicodePwd
# record 1
dn: CN=some user,OU=Users Management,DC=ad,DC=example,DC=com
unicodePwd:: COwwLgiqqaHRyhy4HxWp4A==
This "unicodePwd" attribute comes from a quick search into "user"
2015 Jun 18
0
Samba4 as AD, what password hash is used?
On 18/06/15 12:04, mathias dufresne wrote:
> Hi,
>
> Thank you for this answer, unfortunately I was not able to re-hash password
> as they are hashed into LDB database.
>
> First I retrieved the hash:
> ldbsearch -H $sam '(cn=some user)' unicodePwd
> # record 1
> dn: CN=some user,OU=Users Management,DC=ad,DC=example,DC=com
> unicodePwd::
2020 Oct 14
2
azure ad provisioning | password hashes sync
Hi,
We are (again) looking at syncing our samba AD to the azure AD cloud.
I installed a win2016 server domain member server and set it up for
syncing, including password hashes, so users can login azure/O365 using
their on-prem passwords.
We're using microsoft's latest tech: the new "Azure AD Connect cloud
provisioning". We made sure to check "password hash sync".
2019 Oct 10
3
user password hash
Hi Rowland, all,
On 10/9/19 9:11 AM, Rowland penny via samba wrote:
> You could run something like this on a Samba AD DC:
>
> ldbsearch -H /var/lib/samba/private/sam.ldb -b
> 'dc=samdom,dc=example,dc=com' -s sub
> '(&(objectclass=user)(samaccountname=rowland))' unicodePwd
>
> This will get you a users password, you just need to run it through the
>
2019 Oct 09
3
user password hash
On Tue, Oct 8, 2019 at 8:04 AM Rowland penny via samba
<samba at lists.samba.org> wrote:
>
> On 08/10/2019 12:53, Jonathon Reinhart wrote:
> >
> >
> > On Tue, Oct 8, 2019, 07:45 Rowland penny via samba
> > <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote:
> >
> > On 08/10/2019 12:27, Elias Pereira via samba wrote:
2019 Oct 10
2
user password hash
Rowland,
Can you test this:
echo -n $(ldbsearch -H /var/lib/samba/private/sam.ldb -b 'dc=CHANGE_BASE' -s sub '(&(objectclass=user)(samaccountname=CHANGE_USERNAME))' unicodePwd |grep unicode |awk '{ print $NF }') | base64 -d -w 0 | iconv -t UTF-8 -f UTF-16LE
The results are chinees characters.
But if i put it in the example you showed, it shows the correct things.
2019 Oct 08
3
user password hash
hello list,
What kind of hashing/encryption samba4 ADDC uses for user passwords? base64?
Thanks!
--
Elias Pereira
2019 Oct 08
2
user password hash
On Tue, Oct 8, 2019, 07:45 Rowland penny via samba <samba at lists.samba.org>
wrote:
> On 08/10/2019 12:27, Elias Pereira via samba wrote:
> > hello list,
> >
> > What kind of hashing/encryption samba4 ADDC uses for user passwords?
> base64?
>
Base64 is neither a hash nor an encryption algorithm; it is an encoding.
>
> > Thanks!
> >
> Basically
2024 Oct 27
2
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
On Sun, 27 Oct 2024 15:08:14 +0100
William Edwards <wedwards at cyberfusion.nl> wrote:
>
> > Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba
> > <samba at lists.samba.org> het volgende geschreven:
> >
> > ?On Sun, 27 Oct 2024 13:58:56 +0100
> > William David Edwards via samba <samba at lists.samba.org> wrote:
> >
> >> Hi,
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
Hi,
I'm tying to set user's LDAP passwords using LDAP.
`samba-tool user setpassword` does so by setting the write-only
`unicodePwd` attribute, but turning it into binary and Base64-encoding
it first:
```
if not isinstance(password, str):
pw = password.decode('utf-8')
else:
pw = password
pw = ('"' + pw + '"').encode('utf-16-le')
2024 Oct 27
2
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
Kees van Vloten via samba schreef op 2024-10-27 15:37:
> Op 27-10-2024 om 15:31 schreef Rowland Penny via samba:
>> On Sun, 27 Oct 2024 15:08:14 +0100
>> William Edwards <wedwards at cyberfusion.nl> wrote:
>>
>>>> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba
>>>> <samba at lists.samba.org> het volgende geschreven:
>>>>
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
On Sun, 27 Oct 2024 13:58:56 +0100
William David Edwards via samba <samba at lists.samba.org> wrote:
> Hi,
>
> I'm tying to set user's LDAP passwords using LDAP.
>
> `samba-tool user setpassword` does so by setting the write-only
> `unicodePwd` attribute, but turning it into binary and
> Base64-encoding it first:
>
> ```
> if not
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba <samba at lists.samba.org> het volgende geschreven:
>
> ?On Sun, 27 Oct 2024 13:58:56 +0100
> William David Edwards via samba <samba at lists.samba.org> wrote:
>
>> Hi,
>>
>> I'm tying to set user's LDAP passwords using LDAP.
>>
>> `samba-tool user setpassword` does so by
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
Op 27-10-2024 om 15:31 schreef Rowland Penny via samba:
> On Sun, 27 Oct 2024 15:08:14 +0100
> William Edwards <wedwards at cyberfusion.nl> wrote:
>
>>> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba
>>> <samba at lists.samba.org> het volgende geschreven:
>>>
>>> ?On Sun, 27 Oct 2024 13:58:56 +0100
>>> William David Edwards
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
On Sun, 27 Oct 2024 19:55:24 +0100
William David Edwards <wedwards at cyberfusion.nl> wrote:
> Rowland Penny via samba schreef op 2024-10-27 15:31:
> > On Sun, 27 Oct 2024 15:08:14 +0100
> > William Edwards <wedwards at cyberfusion.nl> wrote:
> >
> >>
> >> > Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba
> >> > <samba
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
Rowland Penny via samba schreef op 2024-10-27 15:31:
> On Sun, 27 Oct 2024 15:08:14 +0100
> William Edwards <wedwards at cyberfusion.nl> wrote:
>
>>
>> > Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba
>> > <samba at lists.samba.org> het volgende geschreven:
>> >
>> > ?On Sun, 27 Oct 2024 13:58:56 +0100
>> > William
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
Op 27-10-2024 om 19:58 schreef William David Edwards:
> Kees van Vloten via samba schreef op 2024-10-27 15:37:
>> Op 27-10-2024 om 15:31 schreef Rowland Penny via samba:
>>> On Sun, 27 Oct 2024 15:08:14 +0100
>>> William Edwards <wedwards at cyberfusion.nl> wrote:
>>>
>>>>> Op 27 okt 2024 om 14:50 heeft Rowland Penny via samba
2024 Oct 28
2
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
On Mon, 28 Oct 2024 12:17:02 +0100
William David Edwards via samba <samba at lists.samba.org> wrote:
> I think I might've found a solution while debugging.
>
> To understand what I'm doing wrong with `unicodePwd`, I'm trying to
> get the LDAP request that LAM does, and compare it to mine.
>
> As I temporarily switched to an unencrypted connection to be able
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
Kees van Vloten schreef op 2024-10-27 20:45:
> Op 27-10-2024 om 19:58 schreef William David Edwards:
>> Kees van Vloten via samba schreef op 2024-10-27 15:37:
>>> Op 27-10-2024 om 15:31 schreef Rowland Penny via samba:
>>>> On Sun, 27 Oct 2024 15:08:14 +0100
>>>> William Edwards <wedwards at cyberfusion.nl> wrote:
>>>>
2024 Oct 27
1
How to set `unicodePwd`? "it's not allowed to set the NT hash password directly"
Op 27-10-2024 om 21:11 schreef William David Edwards:
> Kees van Vloten schreef op 2024-10-27 20:45:
>> Op 27-10-2024 om 19:58 schreef William David Edwards:
>>> Kees van Vloten via samba schreef op 2024-10-27 15:37:
>>>> Op 27-10-2024 om 15:31 schreef Rowland Penny via samba:
>>>>> On Sun, 27 Oct 2024 15:08:14 +0100
>>>>> William Edwards