3
I've got samba set up to allow for the viewing of home directories of logged in users. Now I've got this user, called git
, which does not have a password. The only way to get access to him is by rsa-key
. Is it possible to configure both samba and Windows (10) to use this key for authentication?
1Authentication is not the same thing as data encryption. AES is not used for authentication by SMB, and RSA / PKINIT isn't used for data encryption. (Besides that, Windows requires an actual smartcard for PKINIT.) – user1686 – 2019-09-12T13:54:10.543
A smartcard would be advisable although not required – Steve – 2019-09-12T14:25:19.377
SMB uses AES https://docs.microsoft.com/en-us/windows-server/storage/file-server/smb-security AES and RSA and both algorithms, AES is synchronous and RSA is asynchronous PKINIT is an extension of Kerberos Kerberos is a ticketing-based authentication system GSSAPI, SPNEGO and SASL are not ciphers, you could think of them as a structure of the ciphers to work with A physical smart card is not compulsory
– Steve – 2019-09-12T14:36:53.153