-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/19/2011 07:12 PM, Jonathan Buzzard wrote: > Bruno Martins wrote: > > [SNIP] > >> >> Good night Robert, >> >> My Domain Controller is running Windows Server 2003 R2 X64, so I may not >> be affected by those bulletins >> >> By the way, thanks for noticing. >> > > Unless I am reading the release notes incorrectly, if you use the > samba3x packages in CentOS 5.6 which gets you 3.5.4 with security > patches as opposed to the plain samba packages which only get you a > hideously old 3.0.x then the NTLM V2 issue goes away as samba supports it. > > If you are doing anything with AD and are using CentOS 5.x, then I > cannot stress the value in upgrading to 5.6 and swapping the samba > packages for the samba3x packages. Basically the samba3x packages get > you the same samba as RHEL/CentOS 6, which makes shifting your file > servers to CentOS 6 in due course much easier. > > > JAB. >
JAB is right on that one. There are still NTLMv2 issues with even 2003 and samba 3.0.x. Besides, people should use a currently supported version anyway (...thanking RH for FINALLY stopping backport of patches to the ancient 3.0.x code!!!): http://wiki.samba.org/index.php/Samba3_Release_Planning Robert - -- ________ Robert Freeman-Day https://launchpad.net/~presgas GPG Public Key: http://keyserver.ubuntu.com:11371/pks/lookup?op=get&search=0xBA9DF9ED3E4C7D36 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk4m1y4ACgkQup357T5MfTaPhwCdE9llnvFepXUcvkArqLR7nplz IdAAniPEMRQyo+3L0oEl4cQibTpX8ODp =CW3P -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba