encrypt the tcon itself if seal requested on mount and set encryption support for 3.11 properly

Steve French smfrench at gmail.com
Sat Apr 21 17:04:24 UTC 2018


Any extra testing would be appreciated of this - I tried to Windows
2016 with and without encrypted share and also to Samba 4.7

On Fri, Apr 20, 2018 at 11:55 PM, Steve French <smfrench at gmail.com> wrote:
> On Fri, Apr 20, 2018 at 7:14 PM, Pavel Shilovsky <piastryyy at gmail.com> wrote:
>> Looks good. Please also fix the encryption negotiate context:
>
>  Fixed. Disabled AES-128GCM.  See attached.
>
> Seems to work ok to Windows 3.11 now, and SMB3 tconx is also now
> encrypted if "seal" chosen on mount - tried it to Windows 2016 and to
> Samba 4.7
>
> Main remaining problem that I see is smb3.11 reconnect (it looks like
> we are clearing the hash - but must be missing something)
> --
> Thanks,
>
> Steve



-- 
Thanks,

Steve



More information about the samba-technical mailing list