[Samba] TLS 1.2 Support Samba-AD

Wed May 29 01:21:40 UTC 2019

On Wed, 2019-05-29 at 01:57 +0100, Sérgio Basto via samba wrote:
> On Wed, 2019-05-29 at 05:48 +0530, Anantha Raghava via samba wrote:
> > Hi,
> > 
> > Does Samba-AD support TLS 1.2 for LDAPS? If yes, can some one give
> > more
> > details on its configuration?
> 
> Seems that is enabled by default (tested with samba-4.9.x ) [1] 

It essentially comes down to what GnuTLS does.  That can be tweaked via
 'tls priority' (the value of this parameter is then interpreted via
GnuTLS). 

Andrew Bartlett

-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba