Opportunities for Samba4 based CIFS proxies

[Love]

Volker Lendecke <Volker.Lendecke at SerNet.DE> writes:

> On Wed, Nov 02, 2005 at 06:41:08PM +0100, Love wrote:
>> And even better, the store-afs-keyfile-in-ldb hack can go away,
>> assuming Heimdal and libkafs (or libkrbafs), and be replaced with:
>
> Assuming that all clients send us Kerberos tickets. What can we do if
> they fall back to ntlm?

Seems to be an excellent time to stop using NTLM :)
I guess something like s4u2self could work.

Love

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 477 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20051103/bccd473e/attachment.bin