opinsys / smbkrb5pwd

OpenLDAP overlay to handle synced password changes for LDAP, Samba and MIT kerberos
Other
21 stars 12 forks source link

smbrkb5pwd is making bogus samba hashes. #1

Open jeffbearer opened 12 years ago

jeffbearer commented 12 years ago

I'm having a strange problem where i'm getting bogus hashes in my sambaNtPassword and sambaLmPassword fields. I'm not able to authenticate with those hashes. However if i put in a hash created by smbencrypt authentication against LDAP works as expected.

This link describes it exactly, I have an email into the original poster to see if he came up with, and recalls his solution from 2009.

http://www.openldap.org/lists/openldap-technical/200910/msg00003.html

jeffbearer commented 12 years ago

Eureeka. The makefile was not using openssl and the libcrypto stuff was making the bogus hash. I'm going to update the wiki page about building for centos and the patch file there to make it build with openssl.

frat3rius commented 8 years ago

Yup the same problem in here with latest Debian, maybe it'd be nice to fix the Makefile. What I did is changed this line in Makefile:

SSL_LIB=-lcrypto -lssl OPT=-g -DHAVE_OPENSSL -O2

Now Samba passwords are in sync correctly.