Forgotten from WHATSNEW: security=share and security=server removal

Andrew Bartlett abartlet at samba.org
Wed Dec 19 16:01:42 MST 2012


I just realised while explaining to other users what Samba 4.0 is and is
not, that we forgot to mention that security=server and security=share
went away in Samba 4.0.  We should probably fix that.

Both of these security= options were neat hacks in their time, but like
all hacks they came at a cost, particularly in the complexity of the
internal code and their reliability in the face of clients that use
NTLMv2 by default.  

For security=server, we recommend joining the domain and using
security=ads (or server role = 'domain member').  For security=share the
default security=user covers most use cases, but specifically for public
servers see https://wiki.samba.org/index.php/Public_Samba_Server

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org




More information about the samba-technical mailing list