Late security improvements and my work queue

Andrew Bartlett abartlet at samba.org
Fri Jun 30 11:11:27 UTC 2017


Just a heads-up, that if I ever get free of ldb locking, I want to try
and:
 - enforce a setting of restrict anonymous = 2 on the AD DC
   BUG: https://bugzilla.samba.org/show_bug.cgi?id=12775
 - disable the s3 netlogon server when we are not a DC
 - add a way to disable NTLM entirely
   BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923

Any comments or support in advance most welcome, so if I can make
tested patches that we can land these without drama.

After we freeze, I hope to address a flapping cracknames test:
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12842
and an apparent regression in the multi-process NETLOGON
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12866

Finally, I hope to help my team at Catalyst land the load generation
tool and the performance fixes it has found, it is a really neat thing!

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba




More information about the samba-technical mailing list