Comment 2 for bug 609092

Revision history for this message
Anders Aagaard (aagaande) wrote :

Yes, it's installed when you install samba, I should have specified I meant "by default when installing samba", sorry about that.

I've looked around for a good while now trying to find out what hashes and encryption samba uses on it's files. I assumed it would have to use whatever hash the protocol uses, and it looks like I guessed right. Looking around for specifications on whats stored in the password database I find this in samba's documentation:
"user account information such as username, LM/NT password hashes, password change times, and account flags"

So that's LanMan and MD4 hash'es. LanMan is known for being easy to crack (see http://en.wikipedia.org/wiki/LM_hash ).

My /etc/secrets are hashed to sha512 because it's too easy to break md5. I REALLY don't want my password automatically put in more databases by default in any package.