[Samba] Samba and Active Directory

Gerald (Jerry) Carter jerry at samba.org
Tue Oct 19 21:56:25 GMT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mike Kelly wrote:
| On Tue, Oct 19, 2004 at 03:05:52PM -0500, Michael Wray wrote:
|
|> Make sure signed traffic is disabled on the AD server
|> (at least for traffic from your samba) under domain
|> and local policies.  And that LM,NTLM,&NTLM2
|> when negotiated are enabled on the AD server.
|>
|
| Unfortuntely, the signed traffic setting affects the
| entire domain, and I don't think that I will be able to
| sell my company's AD admins on decreasing
| company-wide security for a single branch office server.
|
| I read this message which says that samba 3 supports signing,
| and that it doesn't need to be disabled in AD.
| http://lists.samba.org/archive/samba/2003-October/000341.html
|
| Is this mesage inaccurate?

Samba 3.0.x does support SMB signing.





cheers, jerry
- ---------------------------------------------------------------------
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song"--Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBdY2JIR7qMdg1EfYRAsg6AJ9BUizsCjMfQY8TaMvj76ip+AdJogCfZpoJ
UoGKkcTAljVT790EXEJ9/Zw=
=FEGD
-----END PGP SIGNATURE-----


More information about the samba mailing list