[PATCH] Turn off NETLOGON by default on standalone/member servers

Andrew Bartlett abartlet at samba.org
Mon Jun 13 19:31:06 UTC 2016


On Mon, 2016-06-13 at 06:49 +0200, Volker Lendecke wrote:
> On Mon, Jun 13, 2016 at 11:54:20AM +1200, Andrew Bartlett wrote:
> > spoolss comes to mind in particular, but what about epmapper and
> > dssetup?  
> 
> winreg? svcctl? If possible, we might give people the chance to start
> with just no RPC servers at all and see how far they get. I could
> imagine even lsa and samr are not really necessary for pure file
> operations until you start doing ACL changes of course. But I could
> imagine cases where this does not matter.
> 
> > Otherwise, perhaps we list what Apple exposes and use that as a
> > guide
> > for what we really should leave on file servers?
> 
> I would rather look at NetApp. Apple highly specialized towards their
> own clients. NetApp have Windows-focused list of clients they
> support.

Got one you can work out supported pipes on?

I'll poke at my macs later in the week - I figure that will be the bare
minimum set.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba






More information about the samba-technical mailing list