[Samba] Samba StartTLS

[steve]

On 11/11/2011 08:31 AM, steve wrote:
> Hi
> Scenario:
> Lan with opensuse 11.4 Samba and LDAP server. Linux, win-xp and win7 clients.
>
>
>
> Nov 10 11:20:16 hh1 smbd[6066]: [2011/11/10 11:20:16.268556,  0]
> lib/smbldap.c:731(smb_ldap_start_tls)
> Nov 10 11:20:16 hh1 smbd[6066]:   Failed to issue the StartTLS instruction:
> Connect error
>

Solved?
Adding:

TLS_REQCERT never

to

/etc/openldap/ldap.conf

allows windows to connect to the samba domain with TLS.

Can anyone comment on the security of this workaround?
Thanks