ntlmssp errors against El Capitan's SMB Server

Christian Ambach ambi at samba.org
Wed Aug 31 20:56:02 UTC 2016


Am 31.08.16 um 18:13 schrieb Simo:

> I would call it just "SPNEGO_REQUIRE_SERVER_MIC" (instead of SMB_STYLE)
> and allow the SMB code paths to set it to No, the default should be to
> require it. The name should reflect what the knob actually wants and
> not where we actually use it this time, it'd be awkward and confusing
> to set "SMB_STYLE" if we figure we need to use it on another protocol.

I think that most of the ordinary users of libsmbclient would prefer
that the checks are relaxed in the default configuration. For security
sensitive connections from Samba processes, we can set a flag that
enforces the check.

Christian





More information about the samba-technical mailing list