[Samba] Samba, AD and devices compatibility...

Marco Gaiarin gaio at sv.lnf.it
Wed Mar 14 11:01:46 UTC 2018


Mandi! Andrew Bartlett via samba
  In chel di` si favelave...

> > This mean that the printer try to auth in LDAP 'plain' (no SSL, no
> > TLS), and so samba refuse that?

> No, it means that Samba is refusing to accept a NTLM or Kerberos
> authenticated connection without SIGN or SEAL negotiated, as an
> attacker could take over an unprotected network connection and do evil
> things with it.
> See 'ldap server require strong auth'.

Ok, so i suppose i've to test 'ldap server require strong auth', but
probably set it to 'NO', that lead cleraly to a very unsecure
configuration.


Because speaking with hardware vendor is sometime very difficult, how
can i ask them some clue in 'windows lingo'?

Eg, i suppose that original windows server 2000 was not signed and
sealed, and sometime in windows server os version this became
mandatory.

Eg, i can speak like: your printer seems not compatible with windows
server 2008R2, because does not sign and seal auth: tehre's a firmware
revision that...


Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list