Skip to content

Remove NTLM authentication #3924

@tehbooom

Description

@tehbooom

Problem Description

2 connectors support only NTLM authentication (Sharepoint Server and Network Drive). NTLM authentication is deprecated and non compliant with FIPS.

Proposed Solution

Add a breaking change to only support kerberos authentication for these connectors and any future connectors that have the option for NTLM

Alternatives

none

Additional Context

This was highlighted in achieving FIPS compliance for connectors. We had to disable these 2 connectors as it is impossible to use FIPS approved algorithms has the problem is not because of the library but because of the protocol itself.

Here is the link from Microsoft showing NTLM is deprecated.

Below is snippet from the link:

"All versions of NTLM, including LANMAN, NTLMv1, and NTLMv2, are no longer under active feature development and are deprecated.
Use of NTLM will continue to work in the next release of Windows Server and the next annual release of Windows.
Calls to NTLM should be replaced by calls to Negotiate, which tries to authenticate with Kerberos and only falls back to NTLM when necessary.
For more information, see, Resources for deprecated features.

[Update - November 2024]: NTLMv1 is removed starting in Windows 11, version 24H2 and Windows Server 2025."

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions