[Samba] Allow unencrypted TLS LDAP query

Ricardo Pardim Claus ricardo.claus at yahoo.com.br
Fri Aug 19 13:44:00 UTC 2016


Dear Marc, 
While I can not create a connection between TLS encrypts SquidGuard and Samba4, I opted to disable encryption on Samba. 
These options I added in the [global] smb.conf: 


client ldap sasl wrapping = sign 
ldap server require strong auth = no

Thanks for the support.


>Hello Ricardo,


>Am 18.08.2016 um 22:17 schrieb Ricardo Pardim Claus via samba:
>> It is possible to configure Samba 4.4.5 to accept queries that do not use TLS? 
>> I'm having trouble authenticating the Proxy / SquidGuard in AD Samba 4.4.5. 
>> 
>> I get this error: 
>> 
>> (squidGuard): ldap_simple_bind_s failed: Strong(er) authentication required
>> 
>> I read the wiki Samba, the new versions are working with authentication TLS encrypted connections. 
>> It is possible to configure Samba to return to receive authentication in normal mode?
>https://wiki.samba.org/index.php/Updating_Samba#Default_for_LDAP_Connections_Requires_Strong_Authentication_.28updating_from_.3C.3D4.4.0.2C_.3C.3D4.3.6_or_.3C.3D4.2.9.29

>Why don't you configure your proxy / SquidGuard to establish an
>encrypted connection instead?

>Regards,
>Marc



More information about the samba mailing list