~/talk

Samba 2020: Why are we still in the 1980s for authentication?

on YouTube 17m
Talkat linux.conf.au 2020 · 2020-01-13..01-17· [security, web-platform]

speaker

name:Andrew Bartlett
links:none on file

resources

video:https://youtu.be/D5hl0fqA0Bc
slides:none on file

summary

Samba 4.11 scales to 300,000 users in simulated load tests, moves to Python 3, adds CI via GitLab, disables disabled SMB1 by default and removes DES while adding fuzz testing; yet authentication still relies on NTLM/NTLMv2 and Kerberos with awkward Windows constraints. Proposals include tunneling auth over SSH using libssh, embedding a KDC on file servers, salting legacy NTLM hashes, slipping TOTP/one‑time tokens into the protocol, or pairing Samba with Keycloak for web‑style identity federation.

AI-written summary · about

chapters (5)

  1. 0:00Introduction
  2. 0:14What has changed
  3. 3:16Authentication
  4. 9:20Hello for Business
  5. 10:46What can we do

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.