Andrew Bartlett
2019-Jul-25 18:59 UTC
[Samba] Turning off SMB1 make slashdot and theregister !
We can't do that until we provide a reasonable way for SMB1 clients to connect, probably via a SMB1 -> SMB2 proxy based on the NTVFS file server (where we had such a prototype until very recently). It won't be perfect SMB1, but needs to be enough for basic operation. I'm quite convinced Samba and SMB1 are critical infrastructure in many places and while we may dislike SMB1 for good reasons the alternative is to force such installations to rely on what will in 2 years be an unsupported and therefore soon an insecure version. I'm not comfortable with that as an outcome, so we need to provide them a way forward. Andrew Bartlett On Fri, 2019-07-19 at 20:37 +1000, ronnie sahlberg via samba-technical wrote:> Good stuff. > > Next step will be to delete the entire smb1 codebase for the next major version. > > On Thu, Jul 11, 2019 at 8:52 AM Jeremy Allison via samba-technical > <samba-technical at lists.samba.org> wrote: > > In some small way to apologise for linking to twitter > > yesterday :-). > > > > tech.slashdot.org/story/19/07/10/2119238/samba-411-removes-smb1-file-sharing-protocol-version-by-default > > > > theregister.co.uk/2019/07/09/samba_sans_one_smb1 > >-- Andrew Bartlett samba.org/~abartlet Authentication Developer, Samba Team samba.org Samba Developer, Catalyst IT catalyst.net.nz/services/samba