Samba Netlogon 128bit

Andrew Bartlett abartlet at
Fri Nov 6 18:12:07 MST 2009

On Wed, 2009-11-04 at 15:16 +0000, Ben Christenbury (FEDERAL) wrote:
> Please answer directly as I am not on the alias, as I found the posting by accident ands this is time critical.
> From: Ben Christenbury (FEDERAL)
> Sent: Wednesday, November 04, 2009 10:01 AM
> To: 'samba-technical at'
> Cc: Ben Christenbury (FEDERAL)
> Subject: RE: Samba Netlogon 128bit
> Please excuse the interruption of your day to this massive list but I have a technical follow-up to the posting below.
> My question is in which distribution available currently or planned could our mutual customer use that would support 138bit encryption for net logon to establish a secure channel for Samba servers that are a member of a windows 2008 domain.   Note as below posted on the Samba support webpages below Windows Domain must downgrade to NT Crypto (<128bit) in order to allow Samba servers to join a domain.   Please note in the Federal Practice which I serve, DISA and NIST prohibit this so the Microsoft recommended solution is to upgrade Samba to a version that meets this requirement.   Since this request come to us frequently as all federal agencies scramble to meet these requirements, I would like to Document which version meet this requirement.
> Thanks in advance for your time and consideration of this request.

Did you try the latest Samba 3.3 or 3.4 release?  The message you quoted
indicated we fixed this as far back as the 3.2 series. 

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <>

More information about the samba-technical mailing list