From owner-freebsd-fs@FreeBSD.ORG Sat Jan 14 10:11:54 2006 Return-Path: X-Original-To: freebsd-fs@freebsd.org Delivered-To: freebsd-fs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CB2A416A41F for ; Sat, 14 Jan 2006 10:11:54 +0000 (GMT) (envelope-from bp@vertex.kz) Received: from relay.vertex.kz (relay.vertex.kz [212.19.129.142]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0668743D45 for ; Sat, 14 Jan 2006 10:11:53 +0000 (GMT) (envelope-from bp@vertex.kz) Received: from lion.butya.kz (localhost [127.0.0.1]) by relay.vertex.kz (Postfix) with SMTP id 5DA035CA0; Sat, 14 Jan 2006 16:11:51 +0600 (ALMT) Received: from relay.vertex.kz (localhost [127.0.0.1]) by localhost.vertex.kz (Postfix) with ESMTP id 34F655B48; Sat, 14 Jan 2006 16:11:51 +0600 (ALMT) Received: by relay.vertex.kz (Postfix, from userid 1000) id 2C6DC5B47; Sat, 14 Jan 2006 16:11:51 +0600 (ALMT) Date: Sat, 14 Jan 2006 16:11:51 +0600 From: Boris Popov To: Victor Snezhko Message-ID: <20060114101151.GT99226@vertex.kz> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.6i Cc: freebsd-fs@freebsd.org Subject: Re: mount_smbfs, windows 2003 domain shares and NETSMBCRYPTO X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Jan 2006 10:11:54 -0000 On Mon, Jan 09, 2006 at 09:06:57PM +0600, Victor Snezhko wrote: > > I went to dig into sources and found that option NETSMBCRYPTO is a > solution. On my -current box it is the only option that needs to be > added to make things work. > > Hope this message will be more helpful than bullshit about turning > off signing on DC (it works, but it's just not right). > > Couple of questions: > > 1) Would it be right to include this hint to a mount_smbfs manpage? > I could prepare a patch and send it to the doc@ maillist. I think so. > > 2) Is there a reason for this option not being in GENERIC? It's > absence makes mount_smbfs in conjunction with default kernel more > and more useless (as time passes and more domain controllers jump > to windows 2003). There can be some restrictions with supplying cryptography in the GENERIC config, but I'm not the right person to answer such questions. -- Boris Popov