Univention Bugzilla – Full Text Bug Listing |
Summary: | Set "ntlm auth = no" in smb.conf (Samba/AD) | ||
---|---|---|---|
Product: | UCS | Reporter: | Arvid Requate <requate> |
Component: | Samba4 | Assignee: | Arvid Requate <requate> |
Status: | CLOSED FIXED | QA Contact: | Felix Botner <botner> |
Severity: | normal | ||
Priority: | P5 | ||
Version: | UCS 4.1 | ||
Target Milestone: | UCS 4.1-1-errata | ||
Hardware: | Other | ||
OS: | Linux | ||
See Also: | https://forge.univention.org/bugzilla/show_bug.cgi?id=41033 | ||
What kind of report is it?: | Security Issue | What type of bug is this?: | --- |
Who will be affected by this bug?: | --- | How will those affected feel about the bug?: | --- |
User Pain: | Enterprise Customer affected?: | ||
School Customer affected?: | ISV affected?: | ||
Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
Ticket number: | Bug group (optional): | Security | |
Max CVSS v3 score: |
Description
Arvid Requate
2016-04-12 11:13:12 CEST
We should also consider setting "smb signing = required", which also appears to be default for Samba 4.3.7 AD DCs. It's "server signing = mandatory" instead of "smb signing = required". Advisory: univention-samba4.yaml FAIL - new ucr vars descriptions /var/univention/buildsystem2/logs/ucs_4.1-0-0-errata4.1-1/univention-samba4_5.0.1-32.664.201604131409.log.bz2: make[1]: Entering directory `/var/build/temp/tmp.GeeqAE1W3b/univention-samba4-5.0.1' univention-install-config-registry Incomplete entries in variable definition univention-samba4.univention-config-registry-variables samba/ntlm/auth: categories univention-samba4.univention-config-registry-variables is not up-to-date. OK - no changes in default settings OK - new ucr vars Fixed, rebuilt, advisory updated. (In reply to Arvid Requate from comment #5) > Fixed, rebuilt, advisory updated. OK - ucr desc OK - YAML |