[Samba] ntlm_auth and SMBv2/v3

Lulzim KELMENI lkelmeni at mairie-saint-ouen.fr
Tue Oct 17 16:19:31 UTC 2017


Thank you Rowland for pointing me to this part of release note that
i have not read when 4.7 was released ! 

I will upgrade our test
platform to 4.7 and test this. 

Best Regards,

des Systèmes d'Information
Mairie de Saint-Ouen

Le 17/10/2017 16:52,
Rowland Penny a écrit : 

> On Tue, 17 Oct 2017 14:52:51 +0200
> Lulzim
KELMENI via samba <samba at lists.samba.org> wrote:
>> Hello Andrew, Do
you plan to release the patch for "ntlm auth = mschapv2-only" option
soon ? We need this on order to use freeradius in a "more safe" scenario
than with "ntlm auth = yes"
> He cannot release it, mainly because it
has been released ;-)
> If you go here:
> You will find this:
> The 'ntlm auth' option default is
renamed to 'ntlmv2-only', reflecting
> the previous behaviour. Two new
values have been provided,
> 'mschapv2-and-ntlmv2-only' (allowing
MSCHAPv2 while denying NTLMv1) and
> 'disabled', totally disabling NTLM
authentication and password changes.
> So, it looks like you need to
upgrade to Samba 4.7.0
> Rowland


More information about the samba mailing list