On 05/03/14 02:06 PM, Michael wrote:
Hello, is it possible to have smbldap-passwd create only the NT hash and not
the very insecure LM HASH? I'm running SAMBA 3.6.9-151 and
smbldap-tools-0.9.6-3.el6.noarch on Red Hat 6.
Through configuration alone no, but you can comment out the relevant lines within smbldap-passwd.  Simply comment out the push(@mods, 'sambaLMPassword' => $sambaLMPassword) around line 160.  You'll also need to modify smbldap-useradd by commenting out add => [ sambaLMPassword => "$lmpassword" ], around line 369.  Changes to smb.conf won't matter if samba is calling smbldap-passwd, since it doesn't look directly at smb.conf.  Perhaps this should be a configurable option since like you, I don't want LM hashes in my directory.


_______________________________________________
Smbldap-tools-tech mailing list
[email protected]
https://mail.gna.org/listinfo/smbldap-tools-tech

Reply via email to