<html dir="ltr"><head></head><body style="text-align:left; direction:ltr;"><div>On Tue, 2022-11-15 at 18:50 +0000, Jeff McCashland (He/him) wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre><br></pre><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre>1. Not using SASL/Kerberos</pre></blockquote><pre><br></pre><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre>2. Not using signing and encryption</pre></blockquote><pre><br></pre><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre>3. Attempting Simple Bind on cleart-text LDAP port rather than using TLS</pre></blockquote><pre><br></pre><pre><br></pre><pre><br></pre><pre>Do all of these need to be set?</pre></blockquote><div><br></div><div>Following up on this, so given that Samba clients work hard to use Kerberos with SASL encryption (and not TLS due to issues around channel binding) that this feature won't work?</div><div><br></div><div>Is it the case that on Windows this is a simple forwarding of the simple bind DN and cleartext password from one server to another, but that advanced techniques like S4U2Proxy are not used?</div><div><br></div><div>Andrew Bartlett</div><div><br></div><div><span><pre>-- <br></pre><div style="width: 71ch;">Andrew Bartlett (he/him) <a href="https://samba.org/~abartlet/">https://samba.org/~abartlet/</a></div><div style="width: 71ch;" data-evo-signature-plain-text-mode="">Samba Team Member (since 2001) <a href="https://samba.org">https://samba.org</a></div><div style="width: 71ch;" data-evo-signature-plain-text-mode="">Samba Team Lead, Catalyst IT <a href="https://catalyst.net.nz/services/samba">https://catalyst.net.nz/services/samba</a></div><div style="width: 71ch;" data-evo-signature-plain-text-mode=""><div style="width: 71ch;"><br></div><div style="width: 71ch;">Samba Development and Support, Catalyst IT - Expert Open Source Solutions</div></div><div style="width: 71ch;"><br></div><div style="width: 71ch;"><br></div><div style="width: 71ch;"><br></div><div style="width: 71ch;"><br></div></span></div></body></html>