secure storage in Active Directory

From: megan (zhongmeiyi_at_yahoo.com.sg)
Date: 05/05/03 

Date: 4 May 2003 19:54:25 -0700

Hi,

I understand that the Active Directory stores user data and passwords.
How does it store these securely within its internal structure?
i.e. how are the passwords protected? Through hashing? PKI?

I've read that the Active Directory database is the ntds.dit, but
I've yet to read anywhere that the passwords are stored there. I've
also read about the NTLM (mostly for backward compatibility with NT
systems), they store the password hash (either NTLM hash or NTLMv2 hash).

Thanks in advance for any feedback.
Megan

Relevant Pages

  • Re: Decrypt
    ... that you store the encrypted passwords on the server. ... In fact, don't just hash the passwords, but combine the password ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Hacked Passwords
    ... a null hash starting with the AAD3 characters. ... store the older LM Hash format. ... passwords on pieces of paper. ...
    (microsoft.public.security)
  • Re: Is it necessary to store the entire MD5, etc. hash for validation?
    ... >I want to store the last 10 passwords used on a legacy database that, ... but I don't have room to store 10x128+ bytes. ... I think you are mistaken about the size of the output of hash functions, ... passphrase hashes if you use SHA-256, ...
    (sci.crypt)
  • Re: secure storage in Active Directory
    ... AD does not store user account passwords - it stores a hash of ... > I understand that the Active Directory stores user data and passwords. ... > How does it store these securely within its internal structure? ... they store the password hash. ...
    (microsoft.public.win2000.security)
  • Re: secure storage in Active Directory
    ... AD does not store user account passwords - it stores a hash of ... > I understand that the Active Directory stores user data and passwords. ... > How does it store these securely within its internal structure? ... they store the password hash. ...
    (microsoft.public.security)