[Samba] Integrate Samba with Active Directory

[Robert Freeman-Day]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/19/2011 07:12 PM, Jonathan Buzzard wrote:
> Bruno Martins wrote:
> 
> [SNIP]
> 
>>
>> Good night Robert,
>>
>> My Domain Controller is running Windows Server 2003 R2 X64, so I may not
>> be affected by those bulletins
>>
>> By the way, thanks for noticing.
>>
> 
> Unless I am reading the release notes incorrectly, if you use the
> samba3x packages in CentOS 5.6 which gets you 3.5.4 with security
> patches as opposed to the plain samba packages which only get you a
> hideously old 3.0.x then the NTLM V2 issue goes away as samba supports it.
> 
> If you are doing anything with AD and are using CentOS 5.x, then I
> cannot stress the value in upgrading to 5.6 and swapping the samba
> packages for the samba3x packages. Basically the samba3x packages get
> you the same samba as RHEL/CentOS 6, which makes shifting your file
> servers to CentOS 6 in due course much easier.
> 
> 
> JAB.
> 

JAB is right on that one.  There are still NTLMv2 issues with even 2003
and samba 3.0.x.  Besides, people should use a currently supported
version anyway (...thanking RH for FINALLY stopping backport of patches
to the ancient 3.0.x code!!!):

http://wiki.samba.org/index.php/Samba3_Release_Planning

Robert

- -- 
________

Robert Freeman-Day

https://launchpad.net/~presgas
GPG Public Key:
http://keyserver.ubuntu.com:11371/pks/lookup?op=get&search=0xBA9DF9ED3E4C7D36
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4m1y4ACgkQup357T5MfTaPhwCdE9llnvFepXUcvkArqLR7nplz
IdAAniPEMRQyo+3L0oEl4cQibTpX8ODp
=CW3P
-----END PGP SIGNATURE-----