Re: [Samba] how to disable RC4 in samba
- Date: Thu, 03 May 2018 20:44:08 +1200
- From: Andrew Bartlett via samba <samba@xxxxxxxxxxxxxxx>
- Subject: Re: [Samba] how to disable RC4 in samba
On Thu, 2018-05-03 at 14:41 +0800, ryanyang51--- via samba wrote:
> I find that samba support several encrypt method. Iwant to disable RC4, where can I set it? My samba version is 4.5.16.
No, this isn't possible. At best you could remove the use of arcfour-
hmac-md4 from Kerberos and RC4 from netlogon.
For netlogon, set 'reject md5 clients = yes'
For kerberos, see the krb5.conf
The rest as listed here can't be directly controlled, particularly in
your older version:
Samba 4.7 supports 'ntlm auth = disabled' which will block some more of
these indirectly however.
I hope this helps. If you can explain your use case it will assist me
in helping you further.
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
To unsubscribe from this list go to the following URL and read the