samba - Jul 2025 - server signing = required

On 28.05.2025 19:47, Rowland Penny via samba wrote:
> On Wed, 28 May 2025 19:22:34 +0200
> Stefan Kania via samba <samba at lists.samba.org> wrote:
>
>> Just checked If I write "server signing = mandatory" in
smb.conf,
>> testparm will show "server signing = required"
>>
> Then there is a bug somewhere. For SMBv2, according to the smb.conf
> manpage, you cannot disable server signing and the allowed values are
> 'default, auto, mandatory and disabled', so testparm returning
> 'required' when it is set to mandatory, is, in my opinion, wrong,
it
> should return what is set.
>
> Rowland
>
Hi folks,

I can confirm that testparm -s returns required, when mandatory is set. 
That is definitely a bug.

Best regards,

Peter

On Wednesday, 28 May 2025 20:07:21 Central European Summer Time Peter Milesson
> Hi folks,
> 
> I can confirm that testparm -s returns required, when mandatory is set.
> That is definitely a bug.
Hi!

It isn't really a bug, "required" is just a synonym for
"mandatory" in the
code. We document one value, but actually allow different values to be 
backwards compatible.

See

https://gitlab.com/samba-team/samba/-/blob/master/lib/param/param_table.c?
ref_type=heads#L131


testparm probably just prints "required" as it is the first in the
list for
SMB_ENCRYPTION_REQUIRED.


	Andreas


-- 
Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D