samba - Apr 2015 - Disabling Oplocks and SMB2

Hello,

We are running some legacy software that instructs us to, via Windows registry
settings, disable all oplocks and SMB2 entirely on each Windows workstation that
connects to the Samba share where the software is hosted. The software
maintainers give dire warners of corruption, etc., if oplocks (and SMB2) are
left enabled.

We?ve run this software off of a Samba share for 20 years and have not had any
data corruption problems. I disable oplocks (and now SMB2) both on the
workstation and through the smb.conf "oplocks = No? and "level2
oplocks = No? settings.

My question?do I really need to turn off smb2 and oplocks on the workstation if
I?ve already disabled them on the Samba share?

I hate to slow down network access to all the other shares just for the sake of
this one legacy program, but definitely do not want to risk data corruption.

Thanks,
Scott

On Tue, Apr 28, 2015 at 04:48:09PM -0400, Scott Sipe
wrote:
> Hello,
> 
> We are running some legacy software that instructs us to, via Windows
registry settings, disable all oplocks and SMB2 entirely on each Windows
workstation that connects to the Samba share where the software is hosted. The
software maintainers give dire warners of corruption, etc., if oplocks (and
SMB2) are left enabled.
> 
> We?ve run this software off of a Samba share for 20 years and have not had
any data corruption problems. I disable oplocks (and now SMB2) both on the
workstation and through the smb.conf "oplocks = No? and "level2
oplocks = No? settings.
Disabling SMB2 would be 

max protocol = NT1

or 

server max protocol = NT1

depending on your Samba version. Level2 oplocks are disabled
already by the oplocks=no setting.
> My question?do I really need to turn off smb2 and oplocks on the
workstation if I?ve already disabled them on the Samba share?
No.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 G?ttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG G?ttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de