On Wed, May 04, 2016 at 02:56:56PM +0100, Alex Sharaz wrote:
Our systems people are always grumbling about our FR servers being the only boxes that use NTLMv1. Will the above config keep them happy and stop these servers from using it?
Not possible; MSCHAPv2 depends on it. So they may as well get used to it. In the latest FR (using wbclient) the correct flag is passed to Samba/Windows so that it should force NTLMv1 auth, even if they've disabled NTLMv1 on the AD servers. In the past that would just break your wireless auth. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>