Re: with-pam and encrypted passwords

2002-09-05 Thread Luke Howard


>1. User send encrypted pasword to samba
>2. Samba converts password to text, and check it agaists pam

It cannot be done; to do so would defeat the purposes of storing
passwords encrypted with a one-way function.

-- Luke
--
Luke Howard | lukehoward.com
PADL Software | www.padl.com



with-pam and encrypted passwords

2002-09-05 Thread Petri Asikainen

I have nss_ldap installed and would like to use it for samba.
As I have read from documetation: If I use encryted password , I can't 
authenticate via pam?
Is this fact still correct?

If yes, would it be possible to implement some how?

Could I (or someone more talent) try to code something like:
(I assume that encrypted password are easily converted to text on 
serverd side)

1. User send encrypted pasword to samba
2. Samba converts password to text, and check it agaists pam
  if (smb_pam_passcheck) {
samba continues and stores needed lm and smb-hashes to local 
smbpassword file
saves session information  and continues
  }

OR..
Could this be done on pam-side?
On above scenario, if pam will create/sync smbpasswd atomaticly when 
login is done via nss_ldap.



Petri Asikainen