Deprecate SMBv1 options and NT4-like domains for Samba 4.13?

[ronnie sahlberg]

On Sat, Aug 8, 2020 at 8:43 AM Andrew Bartlett via samba-technical
<samba-technical at lists.samba.org> wrote:
>
> On Wed, 2020-07-29 at 12:02 -0700, Jeremy Allison via samba-technical
> wrote:
> > On Wed, Jul 01, 2020 at 03:19:19PM +1200, Andrew Bartlett via samba-
> > technical wrote:
>
> > > So I present to you this MR:
> > >
> > > https://gitlab.com/samba-team/samba/-/merge_requests/1398
>
> > > Parameter
> > > Name                     Description                Default
> > > --------------                     -----------                -----
> > > -
> > > domain logons                      Deprecated                 no
> > > raw NTLMv2 auth                    Deprecated                 no
> > > client plaintext auth              Deprecated                 no
> > > client NTLMv2 auth                 Deprecated                 yes
> > > client lanman auth                 Deprecated                 no
> > > client use spnego                  Deprecated                 yes
> > >
> > > If I get time I also hope to fold the only-used-by-attackers LMv2
> > > into
> > > "raw NTLMv2 auth", so we can remove both in 4.14.
> >
> > Sorry for the delay, just catching up on old stuff
> > in my inbox :-).
> >
> > That looks good to me ! It's really good to start
> > marking obsolete stuff as, well, obsolete :-).
> >
> > Anyone else got comments ?
>
> Can I get some further consensus here?  I would really like to merge my
> branch once I add the last required test, but I don't want to blindside
> anyone.

Anything getting closer to removing old obsolete cruft gets a +1 from me.

+1
Good work Andrew.


>
> Thanks!
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                       https://samba.org/~abartlet/
> Authentication Developer, Samba Team  https://samba.org
> Samba Developer, Catalyst IT
> https://catalyst.net.nz/services/samba
>
>
>
>