[Samba] "weak crypto is allowed"--The thread to end all threads

Gregory Sloop gregs at sloop.net
Fri May 27 19:29:35 UTC 2022



> On Fri, 2022-05-27 at 12:05 -0700, Gregory Sloop via samba wrote:

>> So, pardon me, if this feels like thread hijack - but I get this
>> message too, and though I'm on Ubuntu, I've vuln-tested (Greenbone)
>> my DC's and the tests show that the DC's/servers are allowing weak
>> crypto too.

> Not strictly true, from my understanding, Samba falls back to weak
> crypto because that is all that gnutls on the OS allows, you cannot
> override this.

> Rowland

So, then to triple clairify, there's no way/not-possible to tell GNUTLS not to allow that? 
(Or are you saying that telling us how is outside the scope of the Samba list?) 
 
-Greg


More information about the samba mailing list