Reviewed-by: Simo Sorce <idra@samba.org>
Autobuild-User(master): Simo Sorce <idra@samba.org>
Autobuild-Date(master): Tue Jun 11 16:25:54 CEST 2013 on sn-devel-104
<listitem>
<para>
You have explicitly disabled encrypted passwords with
<listitem>
<para>
You have explicitly disabled encrypted passwords with
- <smbconfoption name="encrypt passwords">no</smbconfoption> have a mixed-case password and you haven't enabled the <smbconfoption name="password level"/> option at a high enough level.
+ <smbconfoption name="encrypt passwords">no</smbconfoption> have a mixed-case password.
<?latex \newpage ?>
<smbconfblock>
<?latex \newpage ?>
<smbconfblock>
-<smbconfoption name="password level"><replaceable>integer</replaceable></smbconfoption>
<smbconfoption name="username level"><replaceable>integer</replaceable></smbconfoption>
</smbconfblock>
<smbconfoption name="username level"><replaceable>integer</replaceable></smbconfoption>
</smbconfblock>
<indexterm><primary>clear-text</primary></indexterm>
However, passwords on UNIX systems often make use of mixed-case characters. This means that in order for a
user on a Windows 9x/Me client to connect to a Samba server using clear-text authentication, the
<indexterm><primary>clear-text</primary></indexterm>
However, passwords on UNIX systems often make use of mixed-case characters. This means that in order for a
user on a Windows 9x/Me client to connect to a Samba server using clear-text authentication, the
-<smbconfoption name="password level"/> must be set to the maximum number of uppercase letters that
-<emphasis>could</emphasis> appear in a password. Note that if the Server OS uses the traditional DES version
-of crypt(), a <smbconfoption name="password level"/> of 8 will result in case-insensitive passwords as seen
-from Windows users. This will also result in longer login times because Samba has to compute the permutations
-of the password string and try them one by one until a match is located (or all combinations fail).
+password must be in lower case.
</refsynopsisdiv>
</refentry>
</refsynopsisdiv>
</refentry>
-<refentry id="appc-refentry-134">
-<refmeta>
-<refmiscinfo class="allowable values">number</refmiscinfo>
-<refmiscinfo class="default">0</refmiscinfo>
-</refmeta>
-<refnamediv>
-<refname>[global] password level = number</refname>
-</refnamediv>
-<refsynopsisdiv>
-<para>Specifies the number of uppercase letter permutations used to match passwords. Workaround for clients that change passwords to a single case before sending them to the Samba server. Causes repeated login attempts with passwords in different cases, which can trigger account lockouts.</para>
-
-</refsynopsisdiv>
-</refentry>
-
<refentry id="appc-refentry-135">
<refmeta>
<refmiscinfo class="allowable values">list of NetBIOS names</refmiscinfo>
<refentry id="appc-refentry-135">
<refmeta>
<refmiscinfo class="allowable values">list of NetBIOS names</refmiscinfo>
-<entry colname="col1"><para><literal>password level</literal></para></entry>
-
-<entry colname="col2"><para>numeric</para></entry>
-
-<entry colname="col3"><para>Sets the number of capital letter permutations to attempt when matching a client's password.</para></entry>
-
-<entry colname="col4"><para>None</para></entry>
-
-<entry colname="col5"><para>Global</para></entry>
-
-</row>
-
-<row>
-
<entry colname="col1"><para><literal>null passwords</literal></para></entry>
<entry colname="col2"><para>boolean</para></entry>
<entry colname="col1"><para><literal>null passwords</literal></para></entry>
<entry colname="col2"><para>boolean</para></entry>
guest account = guest
log file = /usr/local/samba/var/log.%m
log level = 8
guest account = guest
log file = /usr/local/samba/var/log.%m
log level = 8
[homes]
comment = Home Directories
[homes]
comment = Home Directories
"WINBINDUID" : ("idmap uid", SambaParmString, P_GLOBAL, ""),
"READRAW" : ("read raw", SambaParmBool, P_GLOBAL, "Yes"),
"WINBINDENUMGROUPS" : ("winbind enum groups", SambaParmBool, P_GLOBAL, "Yes"),
"WINBINDUID" : ("idmap uid", SambaParmString, P_GLOBAL, ""),
"READRAW" : ("read raw", SambaParmBool, P_GLOBAL, "Yes"),
"WINBINDENUMGROUPS" : ("winbind enum groups", SambaParmBool, P_GLOBAL, "Yes"),
- "PASSWORDLEVEL" : ("password level", SambaParmString, P_GLOBAL, "0"),
"MAXPRINTJOBS" : ("max print jobs", SambaParmString, P_LOCAL, "1000"),
"PRINTCAP" : ("printcap name", SambaParmString, P_GLOBAL, ""),
"LOADPRINTERS" : ("load printers", SambaParmBool, P_GLOBAL, "Yes"),
"MAXPRINTJOBS" : ("max print jobs", SambaParmString, P_LOCAL, "1000"),
"PRINTCAP" : ("printcap name", SambaParmString, P_GLOBAL, ""),
"LOADPRINTERS" : ("load printers", SambaParmBool, P_GLOBAL, "Yes"),
log file = /usr/local/samba/var/log.%m
guest account = pcguest
hosts allow = 192.0.2. localhost
log file = /usr/local/samba/var/log.%m
guest account = pcguest
hosts allow = 192.0.2. localhost
auto services = tridge susan
message command = csh -c '/usr/bin/X11/xedit -display :0 %s;rm %s' &
read prediction = yes
auto services = tridge susan
message command = csh -c '/usr/bin/X11/xedit -display :0 %s;rm %s' &
read prediction = yes
;log level = 4
;readraw = no
;writeraw = no
;log level = 4
;readraw = no
;writeraw = no
;mangled map = (;1 )
;protocol = lanman1
;user = susan
;mangled map = (;1 )
;protocol = lanman1
;user = susan
# Password Level allows matching of _n_ characters of the password for
# all combinations of upper and lower case.
# Password Level allows matching of _n_ characters of the password for
# all combinations of upper and lower case.
; username level = 8
# You may wish to use password encryption. Please read
; username level = 8
# You may wish to use password encryption. Please read
"smb passwd file",
"private dir",
"passwd chat",
"smb passwd file",
"private dir",
"passwd chat",
"lanman auth",
"ntlm auth",
"client NTLMv2 auth",
"lanman auth",
"ntlm auth",
"client NTLMv2 auth",