From: Francis Cianfrocca <garbagecat10@...>
Date: 2007-08-23T20:33:04+09:00
Subject: Re: MD5 authentication against Active Directory with ruby ld

------=_Part_41979_17635089.1187868782056
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 8/22/07, James Yang <macinux@gmail.com> wrote:
>
> It is still confusing to me.  I wonder if it is true that a plaintext
> password would be transfered over the network in the case that we use
> the plaintext password to bind  with AD. If this is correct, there is no
> security. I guess there should be an efficient way to work it out.



Yes, the plaintext psw is transferred over the network, whether the
plaintext is some readable passphrase or an MD5 (or other) hash. Use
encryption for the network connection.

------=_Part_41979_17635089.1187868782056--