[Samba] samba4 ad tls version

[Andrew Bartlett]

On Fri, 2021-09-17 at 11:19 -0300, Marcos Ariel Negrini via samba
wrote:
> Hello:
> I have a samba4 ad cluster, I am reading about the tls configuration
> in 
> the smb file. I was looking into disabling the deprecated tls
> versions. 
> I was wondering if there could be problems with older versions of 
> windows (in the cluster we have windows 7 mixed with 10) connecting
> to 
> samba. Which tls configuration is recommended?
> Regards

In general we don't find Windows clients use TLS at all, they all use
NTLM or ideally Kerberos.

So you should be able to restrict this without that concern.

I hope this helps clarify things,

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions