Late security improvements and my work queue

Andrew Bartlett abartlet at
Fri Jun 30 11:11:27 UTC 2017

Just a heads-up, that if I ever get free of ldb locking, I want to try
 - enforce a setting of restrict anonymous = 2 on the AD DC
 - disable the s3 netlogon server when we are not a DC
 - add a way to disable NTLM entirely

Any comments or support in advance most welcome, so if I can make
tested patches that we can land these without drama.

After we freeze, I hope to address a flapping cracknames test:
and an apparent regression in the multi-process NETLOGON

Finally, I hope to help my team at Catalyst land the load generation
tool and the performance fixes it has found, it is a really neat thing!


Andrew Bartlett
Andrew Bartlett             
Authentication Developer, Samba Team
Samba Developer, Catalyst IT

More information about the samba-technical mailing list