Prev: [Samba] Samba 3 and Samba 4 migration
Next: Login Samba/LDAP
From: Oliver Freyd on 20 May 2010 11:30
Tim-Ole Alexander Golz schrieb:
> Hi, all there,
>
>
> first of all I like to introduce me cause this is my first post on this list: I am a networkadmin from Germany, struggling with Apple, Linux and Windows for a couple of years now ...
>
> I have occassionally worked with samba as a domain controller for three or four years now, but with systems windows 2000 / windows 2003 server / windows XP clients.
>
> I have successfully installed some samba-servers working as PDC, even with LDAP as smbpasswd-Backend.
>
> my question is a bit off-topic, but I found no useful help on the web:
>
> on our current project, I have installed a samba PDC with LDAP on Debian Lenny 5.0.4. there seems to be a bug in phldapadmin (the one shipping with Debian Lenny), because the smb-password is not longer hashed. when setting a new domainuser via phpldapadmin with the "Samba 3 account"-scheme, I can not log in to the domain.
>
> I have to do a "smbpasswd user" to get it work.
>
> when I use "smbldap-useradd user && smbldap-passwd user" everything is working fine.
>
> I tried this on three different installations (with Debian Lenny 5.0.3 through 5.0.4), always the same problem.
>
> I have installed the mkntpwd-Tool (as in former installations), but it is not longer needed and I cant even choose it in the phpldapadmin/config-File because there is no longer such a file ... :-(
>
> I have installed all the perl-crypt-modules, tried it with different settings in the smb.conf:
>
> unix password sync = yes
> ldap password sync = yes
>
> but nothing helped.
>
> anyone else who has the same problem? any hints or maybe the solution?
>
>
> thany a lot in advance!
>
>
> tim-ole golz
>
>
I think I have seen the same bug. I've upgraded to phpldapadmin from
testing (1.2.0.5), and I think the LM and NT hashes are still buggy.

I've found that if you edit a userPassword entry, the password gets
copied to the LM and NT Password fields, but probably after it is
encrypted. So the hash comes out wrong.

If I enter a password into the SambaNTPassword field, it works, and
the user can log in with that password. Try it and compare the LM and NT
hashes with those created with smbldap-passwd.

Oliver Freyd

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
 | 
Pages: 1
Prev: [Samba] Samba 3 and Samba 4 migration
Next: Login Samba/LDAP