On Thu, Apr 28, 2011 at 5:52 PM, Christ Schlacta lists@aarcane.org wrote:

On 4/28/2011 17:27, Alberto Moreno wrote:

...

Hi.

I had been using samba with openldap as a backend.

But I had never need to recover a user password from LDAP.

Exist a way to recover user passwords?

Ldap running on Centos 5.5 2.3.43.x   Samba 3.3.x   DB: dbd.

Thanks!!!

if it's stored in plaintext, just view it.  otherwise, you need to subject the password to brute force or standard cracking techniques.  NT/LM hashes are particularly susceptible to attack.

If u open the ldif file u cannot see the password as plain, because ldap server us a password-hash setting that save the password in that format.

Is the first time I have to recover this, exist a tool to do a "brute force" to ldap db that someone here had use before?

Thanks!!!