CentOS 6 AD Authentication

[ekatz]

Hello guys,

We had a working procedure to integrate Linux boxed into our AD (using the following packages: authconfig krb5-workstation pam_krb5 samba-common oddjob-mkhomedir sudo ntp) - a few weeks ago we had to disable SMB v1 on our domain controllers due to vulnerability, any suggestions how to resolve this? first thing I found was samba v3 has difficulty living without SMB 1.0...

Thanks!

[TrevorH]

Your first step is to make sure you have the latest samba\* packages and kernel by running yum update

[ekatz]

It is up to date (running samba-common-3.6.23-43.el6_9.x86_64 / samba-winbind-3.6.23-43.el6_9.x86_64 / samba-winbind-clients-3.6.23-43.el6_9.x86_64) - it will only work if i enable SMBv1 on the domain controller...
If there a way around it? should I look into an alternative way? (maybe sssd?)

[TrevorH]

I don't know of a solution or even if there is one but I do know that the latest samba on el6 is required for some of the more recent MS fixes and also that part of the communication path goes via the kernel 'cifs' module so you definitely need the latest kernel running too if you haven't already got it.