-
Notifications
You must be signed in to change notification settings - Fork 198
Description
Problem Description
2 connectors support only NTLM authentication (Sharepoint Server and Network Drive). NTLM authentication is deprecated and non compliant with FIPS.
Proposed Solution
Add a breaking change to only support kerberos authentication for these connectors and any future connectors that have the option for NTLM
Alternatives
none
Additional Context
This was highlighted in achieving FIPS compliance for connectors. We had to disable these 2 connectors as it is impossible to use FIPS approved algorithms has the problem is not because of the library but because of the protocol itself.
Here is the link from Microsoft showing NTLM is deprecated.
Below is snippet from the link:
"All versions of NTLM, including LANMAN, NTLMv1, and NTLMv2, are no longer under active feature development and are deprecated.
Use of NTLM will continue to work in the next release of Windows Server and the next annual release of Windows.
Calls to NTLM should be replaced by calls to Negotiate, which tries to authenticate with Kerberos and only falls back to NTLM when necessary.
For more information, see, Resources for deprecated features.
[Update - November 2024]: NTLMv1 is removed starting in Windows 11, version 24H2 and Windows Server 2025."