https://bugzilla.novell.com/show_bug.cgi?id=295550#c1 Andreas Schneider changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |dpecka@novell.com --- Comment #1 from Andreas Schneider 2007-07-30 03:41:03 MST --- Is the server rejecting the password or the client? What means 'password of this lenght can be entered manually'? If you don't pass the password options to the mount command and it asks you to enter a password, it works? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=295550#c3 --- Comment #3 from Daniel Pecka 2007-07-31 03:11:50 MST --- There are versions of my samba packages: samba-3.0.23d-19.7 yast2-samba-client-2.14.4-3 yast2-samba-server-2.14.3-10 libsmbclient-3.0.23d-19.7 samba-winbind-3.0.23d-19.7 samba-client-3.0.23d-19.7 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=295550#c5 Andreas Schneider changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |sfrench@us.ibm.com --- Comment #5 from Andreas Schneider 2007-07-31 03:35:29 MST --- There is a check for the length in mount.cifs and it was there before Samba switched to Subversion. Steve: Is there a reason why we only allow passwords with max. 17 chars as command line option? source/client/mount.cifs.c:414 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=295550 Daniel Pecka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |sfrench@us.ibm.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=295550 Andreas Schneider changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |anschneider@novell.com AssignedTo|samba-maintainers@SuSE.de |anschneider@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=295550 User sjayaraman@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=295550#c10 Suresh Jayaraman changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sjayaraman@novell.com Status|NEEDINFO |ASSIGNED Info Provider|sjayaraman@novell.com | --- Comment #10 from Suresh Jayaraman 2007-12-20 20:37:28 MST --- Yes, I could see the code that limits the password length to 16 bytes but not sure when it was done. Before making the changes, we need to verify the Windows behavior as Steve mentioned in Comment #7. I will look into it once I come back from vacation (Jan 2) if that is okay. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=295550 User sjayaraman@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=295550#c13 Suresh Jayaraman changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bugproxy@us.ibm.com --- Comment #13 from Suresh Jayaraman 2008-01-23 05:05:21 MST --- (In reply to comment #7 from Steve French)

Originally this 16 byte maximum was due to NTLM and LANMAN hashing but has been relaxed to 127 bytes by current Windows IIRC. I also need to determine if the longer password requires NTLMv2

If we can verify that this is the case (127 byte limit) - let's change the mount.cifs check - but a key question to ask is whether we should log a password too long message (e.g. to dmesg) if the server type does not accept a long password (e.g. if sec=lanman is specified).

I tried to find more information about Windows passwords:

From Windows help:

"Windows passwords can be up to 127 characters long. However, if you are using Windows XP on a network that also has computers using Windows 95 or Windows 98, consider using passwords not longer than 14 characters. Windows 95 and Windows 98 support passwords up to 14 characters. If your password is longer, you may not be able to log on to your network from those computers." "Windows limits passwords to 14 characters for LanMan hash. NTLM limits passwords to 14 characters on Windows NT, but not on Windows 2000 or XP. NTLM improved the situation some by using all 14 characters to store the password hash. While this did make things better, NT dialog boxes still limited passwords to a maximum of 14 characters."

From the book "Inside Windows Server 2003"

"LM passwords are limited to 14 characters. NTLM passwords limited to 128 characters". So, it is clear that only LanMan password and NTLM password (only in GUI since the dialog box limits it to 14 characters) are limited to 14 characters. I think we should relax the mount.cifs check and allow long passwords/passphrases as most of the Windows servers (Windows 2000, XP and others including Samba) supports long passwords and also we should let the users know by logging long passwords to dmesg if sec=lanman is specified. Attaching patches which makes the proposed changes to mount.cifs and kernel cifs client. Steve, Thoughts/Comments? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=295550 User sjayaraman@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=295550#c15 --- Comment #15 from Suresh Jayaraman 2008-01-23 05:08:52 MST --- Created an attachment (id=191470) --> (https://bugzilla.novell.com/attachment.cgi?id=191470) Proposed patch[2/2] - Log kernel message if password exceeds LM limit -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=295550 User lmuelle@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=295550#c19 Lars Müller changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|lmuelle@novell.com | --- Comment #19 from Lars Müller 2008-02-19 12:56:14 MST --- Best would be entitled to do this on your own. Then you're always able to keep the user space utilities in sync with the kernel. If that makes even sense to you please contact Peter and quote this comment. The repository we use is currently still subversion based and available at https://svn.suse.de/svn/samba At README file from the top level directory provides a starting point. Feel free to contact the Novell Samba Team at irc.suse.de#samba -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.