[Samba] How to disable NTLM authentication on Samba
Rowland Penny
rpenny at samba.org
Wed Oct 10 19:29:11 UTC 2018
On Wed, 10 Oct 2018 18:50:23 +0000 (UTC)
Reinaldo Souza Gomes via samba <samba at lists.samba.org> wrote:
>
> How can I make sure that NTLM(SSP) will never be used??
>
> I’ve set up Samba with SSSD and everything Works fine... except for a
> few Windows machines which every now and then happen to send NTLM
> authentication flags to the Samba server, which happily forwards
> them. And then the authentication fails because SSSD doesn’t support
> NTLM.
>
> I’ve tried all sorts of parameters combination on smb.conf (including
> "ntlm auth = disabled"), but I didn’t find a way to completely refuse
> NTLM authentication on the Samba server, and force the client to use
> another authentication method (kerberos).
You will have to ask the sssd-users mailing list, you are not using
Samba for authentication.
sssd isn't a Samba product.
Samba by default no longer uses NTLMv1
Rowland
More information about the samba
mailing list