win2k username and password storage.

[RichieMac]

Hi all,

I'm a complete beginner to this and need a little help. I have to create a login screen and obviously need to check that the username and password input are valid. How do I go about searching a win2k server for valid usernames and passwords? I assume they are stored somewhere on the system but I don't know where.

Thanks
Richie

 

[buddafish]

i think they are stored in an encrypted state or hashed. when the client sends a logon request, it really sends a the hashed version of the password (not the text string) across the wire to the server... it has been a long while since i thought about this, maybe others can shed some more detailed light on the subject...

 

[RichieMac]

Thanks for the help buddafish.

Do you know where on the system they are stored? Is there a specific file for this or does it depend on the individual system? Any clues?

 

[buddafish]

ntds.dit, in the ad database path...

 

[RichieMac]

Cheers mate.