[Samba] Linux Primary Domain Controller Authentication

[Andrew Bartlett]

On Thu, 2005-11-10 at 11:01 -0200, Felipe Augusto van de Wiel wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Andrew Bartlett escreveu:
> > On Wed, 2005-11-09 at 11:49 -0200, Felipe Augusto van de Wiel wrote:
> >>Did you disable "Require Sign or Seal" (I'm not sure if it is needed 
> >>on w2k3).
> >
> > This has not been required in any release of Samba3.  
> 
> 	In early Samba3 releases, at least with w2k Brazilian versions,
> (and it is about mid-2003), we need to disable the Require Sign or Seal
> Local Policy to get MS Windows and Samba3 playing together. :)

In Samba2 this applied, but I have no reports that this was required in
*released* versions of Samba3.  I suspect it was something else.

This is an important policy for network security, and the client can be
compromised by an active network attack if it is not set.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20051111/e783ef10/attachment.bin