From 3bb3f2d0ce1165d0cac683f507d838d20c8c743b Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Sat, 14 Nov 1998 03:01:40 +0000 Subject: Update for 2.0beta1. Jeremy. (This used to be commit 598d0255d40da29ebab3d1a3c9eb66ba654db7b5) --- docs/htmldocs/smbpasswd.5.html | 32 ++++++++++++++++++-------------- 1 file changed, 18 insertions(+), 14 deletions(-) (limited to 'docs/htmldocs/smbpasswd.5.html') diff --git a/docs/htmldocs/smbpasswd.5.html b/docs/htmldocs/smbpasswd.5.html index 35649e689b..6c4081fc4d 100644 --- a/docs/htmldocs/smbpasswd.5.html +++ b/docs/htmldocs/smbpasswd.5.html @@ -3,7 +3,7 @@ -smbpasswd +smbpasswd (5) @@ -11,7 +11,7 @@
-

smbpasswd

+

smbpasswd (5)

Samba

23 Oct 1998

@@ -30,7 +30,7 @@


This file is part of the Samba suite.


smbpasswd is the Samba encrypted password file. It contains -the username, unix user id and the SMB hashed passwords of the +the username, Unix user id and the SMB hashed passwords of the user, as well as account flag information and the time the password was last changed. This file format has been evolving with Samba and has had several different formats in the past. @@ -38,7 +38,7 @@ and has had several different formats in the past.

FILE FORMAT


The format of the smbpasswd file used by Samba 2.0 is very similar to -the familiar unix passwd (5) file. It is an ASCII file containing +the familiar Unix passwd (5) file. It is an ASCII file containing one line for each user. Each field within each line is separated from the next by a colon. Any entry beginning with # is ignored. The smbpasswd file contains the following information for each user: @@ -50,7 +50,9 @@ smbpasswd file contains the following information for each user:


  • uid


    This is the UNIX uid. It must match the uid field for the same - user entry in the standard UNIX passwd file. + user entry in the standard UNIX passwd file. If this does not + match then Samba will refuse to recognize this smbpasswd file entry + as being valid for a user.


  • Lanman Password Hash


    This is the LANMAN hash of the users password, encoded as 32 hex @@ -58,7 +60,7 @@ smbpasswd file contains the following information for each user: string with the users password as the DES key. This is the same password used by Windows 95/98 machines. Note that this password hash is regarded as weak as it is vulnerable to dictionary attacks and if - two users choose the same password this entry will be identical (ie. + two users choose the same password this entry will be identical (i.e. the password is not "salted" as the UNIX password is). If the user has a null password this field will contain the characters "NO PASSWORD" as the start of the hex string. If the hex string @@ -67,7 +69,7 @@ smbpasswd file contains the following information for each user: server.


    WARNING !!. Note that, due to the challenge-response nature of the SMB/CIFS authentication protocol, anyone with a knowledge of this - password hash will be able to impersonate the user of the network. + password hash will be able to impersonate the user on the network. For this reason these hashes are known as "plain text equivalent" and must NOT be made available to anyone but the root user. To protect these passwords the smbpasswd file is placed in a @@ -84,11 +86,11 @@ smbpasswd file contains the following information for each user: Password Hash as it preserves the case of the password and uses a much higher quality hashing algorithm. However, it is still the case that if two users choose the same password this - entry will be identical (ie. the password is not "salted" as the + entry will be identical (i.e. the password is not "salted" as the UNIX password is).


    WARNING !!. Note that, due to the challenge-response nature of the SMB/CIFS authentication protocol, anyone with a knowledge of this - password hash will be able to impersonate the user of the network. + password hash will be able to impersonate the user on the network. For this reason these hashes are known as "plain text equivalent" and must NOT be made available to anyone but the root user. To protect these passwords the smbpasswd file is placed in a @@ -104,8 +106,8 @@ smbpasswd file contains the following information for each user: any of the characters.