FreeTDS Development Group

[Bob Hetzel <beh AT case.edu>]

Be advised that the security in all levels below NTLMv2 is so bad 
that devices no more powerful than a cell phone can crack passwords 
sniffed over wireless in approx 3 minutes...  potentially even 
quicker.   Much quicker from a common laptop.  LM hashes are 
considered to be about as secure as plain text nowadays.  I would 
highly recommend against setting this to anything other than "Use 
NTLMv2 response only /refuse NT and LM".  Note that you have match up 
all workstations, servers, and domain controllers or else use the 
negotiation based intermediate steps.

Unfortunately Microsoft (in their amazing wisdom) enabled everything 
past NT4 sp3 or so but didn't make it default behavior to negotiate 
down automatically, starting with the most secure authentication mode..

    Bob


> Date: Sun, 27 Aug 2006 14:14:24 -0400
> From: "Mark Larsen" <larsenmtl AT gmail.com>
> Subject: Re: [freetds] SQL Server 200, Windows Server 2003 and FreeTDS
> To: "FreeTDS Development Group" <freetds AT lists.ibiblio.org>
> Message-ID:
>         <942bcc170608271114m4d849cd5v7acfa84741f7d791 AT mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> The LAN Manager Authentication Level.
>
> >
> > Which fix? Did you enabled tcp/ip authorization or did you change
> > "LAN Manager Authentication Level"?
> >
> > freddy77
> >
> >
> > _______________________________________________
> > FreeTDS mailing list
> > FreeTDS AT lists.ibiblio.org
> > http://lists.ibiblio.org/mailman/listinfo/freetds
> >
>
>
> ------------------------------