Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-28 Thread Andrew Bartlett
On Thu, 2012-05-24 at 16:25 -0400, aurfalien wrote: > Hi all, > > I am using OpenLDAP and over have ~800 users in its DB. If you have sambaNTPassword values and have Samba connected to it as it's passdb backend, you can extract it using pdbedit -w. Otherwise (unless you stored cleartext), it is

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-25 Thread Gaiseric Vandal
I understand what you are trying to accomplish. However I do not know which LDAP field is used for the "pGina" password- I believe it is "userPassword" but I am not sure. If seems to me you have three options 1. Crack the unix passwords so you can create matching windows passwords. 2. Configu

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-25 Thread aurfalien
I would also like to add that since Samba and in effect Windows does not behave like Nix with regards to who you are and what you are trying to do, looks like I will have to integrate PDC functionality into my LDAP server :( Man, this easily quadruples my over all LDAP database, gross. But at l

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-25 Thread aurfalien
I am using pGina for authing, correct. But when I map drive shares, I'll need some kind of authing mechanism. My desire was this; Since I already auth the user during there pGina login to Windows, I did not want to auth again for drive mapping to a Samba server. But... since this SSO doesn't c

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-25 Thread Gaiseric Vandal
pbdedit will export the "Windows" password from the "SambaNTPassword" field (won't it?) My understanding was the pGina was using the unix password in the "userPassword" field?Or am I wrong? On 05/25/12 09:36, aurfalien wrote: > Now thats brilliant, elegant and simple. > > Thanks Collen, l

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-25 Thread aurfalien
Now thats brilliant, elegant and simple. Thanks Collen, looking forward to trying it. - aurf On May 25, 2012, at 2:31 AM, Collen wrote: > Hi, > > why not export with pdbedit and then import it again ?! > no converting needed... (except for smb.conf that is.) > > cheers. > > On 25-5-2012 0:01,

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-24 Thread Collen
Hi, why not export with pdbedit and then import it again ?! no converting needed... (except for smb.conf that is.) cheers. On 25-5-2012 0:01, Gaiseric Vandal wrote: Just what is in the documentation on samba.org. Anything involving plain-text authentication seems to be discouraged. On 05/2

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-24 Thread Gaiseric Vandal
Just what is in the documentation on samba.org. Anything involving plain-text authentication seems to be discouraged. On 05/24/12 17:56, aurfalien wrote: > Hi Gaiseric, > > I tried w/o success in configuring Samba + PAM last night. > > Do you know now of any documentation that would help? > > -

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-24 Thread aurfalien
Hi Gaiseric, I tried w/o success in configuring Samba + PAM last night. Do you know now of any documentation that would help? - aurf On May 24, 2012, at 5:35 PM, Gaiseric Vandal wrote: > Presumably with the PGINA/LDAP solution, the has method is something > unix-compatible (e.g. unix crypt+m

Re: [Samba] exported LDAP DB > file > smbpasswd?

2012-05-24 Thread Gaiseric Vandal
Presumably with the PGINA/LDAP solution, the has method is something unix-compatible (e.g. unix crypt+md5, or SSHA) that is hard to break with a password cracking program? Are the LDAP transmissions done in the clear? If so, you could sniff the traffic and capture the passwords. (You may no