mount_smbfs, windows 2003 domain shares and NETSMBCRYPTO

[Boris Popov]

On Mon, Jan 09, 2006 at 09:06:57PM +0600, Victor Snezhko wrote:
> 
> I went to dig into sources and found that option NETSMBCRYPTO is a
> solution. On my -current box it is the only option that needs to be
> added to make things work.
> 
> Hope this message will be more helpful than bullshit about turning
> off signing on DC (it works, but it's just not right). 
> 
> Couple of questions:
> 
> 1) Would it be right to include this hint to a mount_smbfs manpage?
>    I could prepare a patch and send it to the doc@ maillist.

	I think so.
> 
> 2) Is there a reason for this option not being in GENERIC? It's
>    absence makes mount_smbfs in conjunction with default kernel more
>    and more useless (as time passes and more domain controllers jump
>    to windows 2003).

	There can be some restrictions with supplying cryptography
in the GENERIC config, but I'm not the right person to answer such
questions.

-- 
Boris Popov