[Samba] Samba, AD and devices compatibility...

[Rowland Penny]

On Fri, 11 May 2018 09:58:11 +0200
Marco Gaiarin via samba <samba at lists.samba.org> wrote:

> Mandi! Andrew Bartlett via samba
>   In chel di` si favelave...
> 
> > > There's some way to ''tight'' that configuration , eg permit
> > > 'ldap server require strong auth = no' only by some hosts?
> > > Or some other smb.conf options that i've missed?
> 
> > Nothing at this stage.
> 
> Ok.
> 
> 
> > The issue is that they need to do fully signed or sealed Kerberos
> > SASL. 
> 
> Sorry, but i've really a bit of confusion in this field... You forgot
> a 'not' somwhere in this sentence? ;-)
> 
> I've understood that 'sign or seal' mean SASL over TLS/SSL, and my
> printer suport only SASL, so it is not 'sign and sealed'...
> 
> 

I think that is what Andrew is trying to tell you, the printer needs to
support SASL over TLS/SSL or it will never work. I don't think there is
anything you can do, but I am surprised that the print doesn't already
support it, after all, it isn't something new ;-)

Rowland