For sambaXP 2021 Björn Jacke, longtime member of the international Samba Team and SerNet's AIX expert, has hosted a tutorial. We provide the recording of "Integrate SAMBA+ AIX in an existing AD domain" in our YouTube channel.

Play-Button AIX-Tutorial

SAMBA+ AIX are SerNet’s Samba packages for IBM's AIX Unix operating system. The packages have minimal dependencies on third-party libraries or other external package sources – but come with a lot of advantages and support a lot of features. Please have a look at the basics on our SAMBA+ AIX information page. Also, our team will be happy to help with any questions or to get more in-depth technical details on SAMBA+ AIX. Get in contact with them via mail to

SAMBA+ now has its own YouTube channel. To kick things off, we offer two playlists: 

  • sambaXP 2020: All presentations of our first digital sambaXP can be watched here. 
  • Talks by SerNet colleagues: Numerous talks at various events have been recorded over the years. We have compiled them here. 

Videos of sambaXP 2021 will also be published by the Orga Committee on the new YouTube channel. In addition, more content on Samba and SAMBA+ is being planned. More recordings of past sambaXPs will also find their way to YouTube. Until then, all materials up to the first sambaXP in 2002 are accessible in our archive

The Samba team has informed about an issue that applies to Samba used as domain controller only (both as classic/NT4-style and active direcory DC). Please read the following text carefully, which we also publish here:

Samba users have reported that the exploit for "ZeroLogin" passes against Samba. Samba has some protection for this issue because since Samba 4.8 we have set a default of 'server schannel = yes'. Users who have changed this default are hereby warned that Samba implements the AES netlogon protocol faithfully and so falls to the same fault in the cryptosystem design.

Vendors supporting Samba 4.7 and below should patch their installations and packages to change this default, as values of:

  • server schannel = no
  • server schannel = auto

are NOT secure and we expect they can result in full domain compromise, particularly for AD domains.

Some public exploit tests, such as only confirm that a ServerAuthenticate3 call operates, but not that the ServerPasswordSet2 call required to exploit the domain also operates.

We are well aware of administrator concern and are looking to provide patches that provide mitigation here, to make the ServerAuthenticate3 call also fail.

We, like Microsoft, suggest that 'server schannel = yes' must be set for secure operation. This is our equivalent to Microsoft's FullSecureChannelProtection=1 registry key, with the difference that it's already enabled by default in all Samba major versions released in the last three years.

Finally, we would note that Samba's audit logging will record ServerAuthenticate3 and ServerPasswordSet calls including the source IP, details will be provided later on the options to enable.

There seem to be some legacy software, which still requires "server schannel = auto". See the following bugs:

We'll add additional hardening that will allow administrators to use "server schannel = yes" globally and define exceptions only for specified computer accounts. Our progress can be monitored via this bug:

The SAMBA+ News are now also available via RSS feed. The URL to the feed is .

In the News, SerNet's Samba Team regularly provides information on current versions, security updates, events such as sambaXP, etc. They are also a good source for Samba admins to keep up to date.

Alternatively, the SAMBA+ Newsletter is also available. and the SAMBA+ shop shop are now available in French. SerNet would like to do justice to the great interest that SAMBA+ arouses among French-speaking countries.

Please note: Communication with our team and support of SAMBA+ will continue to be in English and German respectively. et la shop SAMBA+ sont désormais disponibles en français. SerNet tient à rendre justice au grand intérêt que suscite SAMBA+ auprès des pays francophones.

Veuillez noter: La communication avec notre équipe et le soutien à SAMBA+ continueront à se faire respectivement en anglais et en allemand.

Contact us
Deutsch English Français