Bob Wyatt
2019-Sep-21 00:56 UTC
[Samba] Samba 3.6.23, Windows Server 2012 R2 AD Environment
I know it's an old release, and my apologies for wasting anyone's time. I've been asked about an older version of AIX 7.1 with Samba 3.6.23 installed. The requestor is moving to a Windows Server 2012 R2 domain. They want AIX/Samba 3.6.23 to be a domain member, using the 2012 R2 AD to authenticate users to access Samba shares on the AIX server. This is the way it's working today at a 2003 functional level. Will 3.6.23 work this way with 2012 R2, or is an upgrade into the 4.X family mandated? The requestor is upgrade-wary, so if they can stay at 3.6.23, that's the way they want to go. Thank you in advance for any guidance offered! Bob Wyatt
Andrew Bartlett
2019-Sep-21 06:17 UTC
[Samba] Samba 3.6.23, Windows Server 2012 R2 AD Environment
On Fri, 2019-09-20 at 20:56 -0400, Bob Wyatt via samba wrote:> I know it's an old release, and my apologies for wasting anyone's time. > > I've been asked about an older version of AIX 7.1 with Samba 3.6.23 > installed. > > The requestor is moving to a Windows Server 2012 R2 domain. > > > > They want AIX/Samba 3.6.23 to be a domain member, using the 2012 R2 AD to > authenticate users to access Samba shares on the AIX server. > > This is the way it's working today at a 2003 functional level. > > > > Will 3.6.23 work this way with 2012 R2, or is an upgrade into the 4.X family > mandated?I guess if you forget the root password it will be a handy way back into the server. I jest, just don't run old insecure, unsupported code.> The requestor is upgrade-wary, so if they can stay at 3.6.23, that's the way > they want to go.It is old, unsupported and insecure. You won't get much sympathy here. Why don't they want to upgrade? Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Rowland penny
2019-Sep-21 07:05 UTC
[Samba] Samba 3.6.23, Windows Server 2012 R2 AD Environment
On 21/09/2019 01:56, Bob Wyatt via samba wrote:> I know it's an old release, and my apologies for wasting anyone's time. > > I've been asked about an older version of AIX 7.1 with Samba 3.6.23 > installed.So they want to continue using something that relies on SMBv1, how secure.> > The requestor is moving to a Windows Server 2012 R2 domain.How are they planning to do this ? I thought you couldn't buy 2012R2 any more.> > > > They want AIX/Samba 3.6.23 to be a domain member, using the 2012 R2 AD to > authenticate users to access Samba shares on the AIX server. > > This is the way it's working today at a 2003 functional level. > > > > Will 3.6.23 work this way with 2012 R2, or is an upgrade into the 4.X family > mandated?Possibly, just don't ask here for help doing this, 3.6.x is dead, it is insecure (lots of unfixed bugs, that will not be fixed).> > The requestor is upgrade-wary, so if they can stay at 3.6.23, that's the way > they want to go.If this is a customer, my advice would be to tell them to upgrade everything and then keep it up to date. If they have a data loss, it will cost them more than the cost of upgrading. If they will not upgrade, I would just walk away, you cannot afford to be dragged into any possible data loss fall out. If there is a data loss, they will blame you! Rowland