Skip to Content.
Sympa Menu

freetds - Re: [freetds] SQL Server 200, Windows Server 2003 and FreeTDS

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: Bob Hetzel <beh AT case.edu>
  • To: freetds AT lists.ibiblio.org
  • Subject: Re: [freetds] SQL Server 200, Windows Server 2003 and FreeTDS
  • Date: Mon, 28 Aug 2006 13:16:45 -0400

Be advised that the security in all levels below NTLMv2 is so bad that devices no more powerful than a cell phone can crack passwords sniffed over wireless in approx 3 minutes... potentially even quicker. Much quicker from a common laptop. LM hashes are considered to be about as secure as plain text nowadays. I would highly recommend against setting this to anything other than "Use NTLMv2 response only /refuse NT and LM". Note that you have match up all workstations, servers, and domain controllers or else use the negotiation based intermediate steps.

Unfortunately Microsoft (in their amazing wisdom) enabled everything past NT4 sp3 or so but didn't make it default behavior to negotiate down automatically, starting with the most secure authentication mode..

Bob


Date: Sun, 27 Aug 2006 14:14:24 -0400
From: "Mark Larsen" <larsenmtl AT gmail.com>
Subject: Re: [freetds] SQL Server 200, Windows Server 2003 and FreeTDS
To: "FreeTDS Development Group" <freetds AT lists.ibiblio.org>
Message-ID:
<942bcc170608271114m4d849cd5v7acfa84741f7d791 AT mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

The LAN Manager Authentication Level.

>
> Which fix? Did you enabled tcp/ip authorization or did you change
> "LAN Manager Authentication Level"?
>
> freddy77
>
>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds
>


------------------------------





Archive powered by MHonArc 2.6.24.

Top of Page