[Samba] Completely Disable NTLM on Samba4

mathias dufresne infractory at gmail.com
Mon May 23 13:02:30 UTC 2016


I should have a good karma: my company hired an AD expert from Microsoft
for two days before my vacation : )

I asked him what is their (M$) point of view regarding fully disabling NTLM
& NTLMv2. The answer I remind is: "some services [on client computers] rely
on NTLM[v2] in certain conditions so don't disable it to avoid strange
issues".
As far as I understand, and if my memory is good enough coming back from
vacation, we should keep NTLM (v2 at least) on DC as they manage
authentication for client computers.
Regarding file servers I expect we can disable NTLM: their role is to offer
files only.

I've asked that MS person to confirm (or not) that. I come back to tell you.

2016-05-19 5:50 GMT+02:00 Jeremy Allison <jra at samba.org>:

> On Thu, May 19, 2016 at 10:55:09AM +0800, Kelvin Yip wrote:
> > Thanks. I already request as below.
> >
> > https://bugzilla.samba.org/show_bug.cgi?id=11923
>
> Thanks Kelvin, now we have somewhere to track
> the patchset.
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


More information about the samba mailing list