[Samba] "weak crypto is allowed"--The thread to end all threads

Gregory Sloop gregs at sloop.net
Fri May 27 19:29:35 UTC 2022

> On Fri, 2022-05-27 at 12:05 -0700, Gregory Sloop via samba wrote:

>> So, pardon me, if this feels like thread hijack - but I get this
>> message too, and though I'm on Ubuntu, I've vuln-tested (Greenbone)
>> my DC's and the tests show that the DC's/servers are allowing weak
>> crypto too.

> Not strictly true, from my understanding, Samba falls back to weak
> crypto because that is all that gnutls on the OS allows, you cannot
> override this.

> Rowland

So, then to triple clairify, there's no way/not-possible to tell GNUTLS not to allow that? 
(Or are you saying that telling us how is outside the scope of the Samba list?) 

More information about the samba mailing list