Scott Ticknor
Level 1
(0 points)
Q: 128-bit Samba Authentication
I have a windows 7 domain machine that has a security policy that requires 128-bit NTLM encryption for accessing SMB shares. Assuming the policy must remain unchanged, is there any way to configure OS X Server (El Cap/Server app 5) to understand the 128-bit requests? All searches only mention that one should disable 128 bit on the windows client but that is not an option. Does OS X 10.11 samba support this configuration?
by MrHoffman,Solvedanswer
MrHoffman
Level 6
(15,627 points)
Mac OS X
It's reportedly an Apple-developed SMB / SMB2 / CIFS server (Ars), and not a fork of Samba.
Microsoft Active Directory / LDAP / Kerberos is the recommended approach and the upgrade path here, given that Microsoft is no longer recommending use of NTLM (MS) — the NTLM crypto used is old and crufty and known to be very weak.
