[phpldapadmin] [ phpldapadmin-Bugs-3003779 ] Unable to check password for NT and LN samba hashed

Bugs item #3003779, was opened at 2010-05-19 12:05
Message generated for change (Comment added) made by wurley
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=3003779&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: 1.2.x
>Status: Closed
>Resolution: Accepted
Priority: 5
Private: No
Submitted By: Olaf Reitmaier Veracierta (olafrv)
Assigned to: Nobody/Anonymous (nobody)
Summary: Unable to check password for NT and LN samba hashed

Initial Comment:
When using "check password" link on a hash or password field samba NT or LM hash, the check function always return false.

The problems is that the password_check function in lib/function.php does not support LM or NT password, the SOLUTION CODE is bellow and consist to check using lmhash and nthash function before fail to check password in default action of the function:

                # No crypt is given assume plaintext passwords are used
                default:
                        //[email protected] - 2010/05/18
                        # Ok, But check first against lm and nt samba hashes
                        $sambapassword = new smbHash;
                        $lmhash = strtolower($sambapassword->lmhash($plainpassword));
                        $nthash = strtolower($sambapassword->nthash($plainpassword));
                        if ($lmhash==strtolower($cryptedpassword) ||
                                $nthash==strtolower($cryptedpassword)) return true;
                        //[email protected] - 2010/05/18

                        if ($plainpassword == $cryptedpassword)
                                return true;
                        else
                                return false;


----------------------------------------------------------------------

>Comment By: Deon George (wurley)
Date: 2011-04-27 22:34

Message:
Thanks for the suggested solution. I've implemented a little differently,
but hopefully the same result.

Committed to git #9e9960b

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=3003779&group_id=61828

------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/