[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#987720: ITP: ksmbd-tools -- cifsd kernel server userspace utilities



Hi Gürkan,

On 29.11.21 at 11:52, Gürkan Myczko wrote:
Very true so. However I'm not sure what to do about the reject:
md4 parts are not welcome, however upstream also doesn't know:
https://github.com/cifsd-team/ksmbd-tools/issues/218

Well, that's really unfortunate and I hope it's a misunderstanding of why md4 is used. True, md4 and the like are insecure and shouldn't be used anymore - but if software wants to implement a protocol that (practically) requires md4 it's a different story. There is simply no sensible smb implementation that doesn't need md4 (and Samba uses it as well).

I think the linked thread[1] is a pretty good discussion on that topic. Especially https://www.spinics.net/lists/linux-cifs/msg22573.html seems a good summary why md4 is needed.

I hope ftp masters can be convinced by good arguments...


Best regards
Philip


[1] https://www.spinics.net/lists/linux-cifs/msg22555.html

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


Reply to: