Samba Netlogon 128bit

[Andrew Bartlett]

On Wed, 2009-11-04 at 15:16 +0000, Ben Christenbury (FEDERAL) wrote:
> Please answer directly as I am not on the alias, as I found the posting by accident ands this is time critical.
> From: Ben Christenbury (FEDERAL)
> Sent: Wednesday, November 04, 2009 10:01 AM
> To: 'samba-technical at lists.samba.org.'
> Cc: Ben Christenbury (FEDERAL)
> Subject: RE: Samba Netlogon 128bit
> 
> 
> Please excuse the interruption of your day to this massive list but I have a technical follow-up to the posting below.
> My question is in which distribution available currently or planned could our mutual customer use that would support 138bit encryption for net logon to establish a secure channel for Samba servers that are a member of a windows 2008 domain.   Note as below posted on the Samba support webpages below Windows Domain must downgrade to NT Crypto (<128bit) in order to allow Samba servers to join a domain.   Please note in the Federal Practice which I serve, DISA and NIST prohibit this so the Microsoft recommended solution is to upgrade Samba to a version that meets this requirement.   Since this request come to us frequently as all federal agencies scramble to meet these requirements, I would like to Document which version meet this requirement.
> Thanks in advance for your time and consideration of this request.
> 

Did you try the latest Samba 3.3 or 3.4 release?  The message you quoted
indicated we fixed this as far back as the 3.2 series. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20091107/eb6cf4d9/attachment.pgp>