freeipa

#3337 [RFE] Disable NTLM support entirely in adtrust
Opened by simo. Modified

Open
Close Issue

We should diable ntlm support entirely when we configure the samba server in adtrust. We rely on gssapi only, so we should test with ntlm completely disabled and see if trusts setup works.
If it does we should consider making it the default, NTLM is weak and keeps seeing succefssful attacks.

You mean samba FS, right? Are there any other cases when we should disable NTLM? It sounds that a design page would be required. Turning into RFE.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=910453 (Red Hat Enterprise Linux 7)

Move all uncompleted tickets to next month bucket.

Agreed in triage to move to Pilsner

Rename "trusts" component to "Trusts" to achieve correct sorting.

Unlink Bugzilla, ticket won't be part of RHEL-7.0.

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=973645

Metadata Update from @simo:
- Issue assigned to someone
- Issue set to the milestone: Future Releases
Metadata
None
None
None
Normal
enhancement
Trusts
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.