samba - Sep 2021 - samba4 ad tls version

Hello:
I have a samba4 ad cluster, I am reading about the tls configuration in 
the smb file. I was looking into disabling the deprecated tls versions. 
I was wondering if there could be problems with older versions of 
windows (in the cluster we have windows 7 mixed with 10) connecting to 
samba. Which tls configuration is recommended?
Regards

On Fri, 2021-09-17 at 11:19 -0300, Marcos Ariel Negrini via samba
wrote:
> Hello:
> I have a samba4 ad cluster, I am reading about the tls configuration
> in 
> the smb file. I was looking into disabling the deprecated tls
> versions. 
> I was wondering if there could be problems with older versions of 
> windows (in the cluster we have windows 7 mixed with 10) connecting
> to 
> samba. Which tls configuration is recommended?
> Regards
In general we don't find Windows clients use TLS at all, they all use
NTLM or ideally Kerberos.

So you should be able to restrict this without that concern.

I hope this helps clarify things,

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions