similar to: How secure is SMB3 over internet?

On Sat, Oct 20, 2018 at 3:56 AM Reindl Harald via samba <samba at lists.samba.org> wrote: > Am 19.10.18 um 20:04 schrieb jmqaodmthr1acosyg--- via samba: > > Hello, > > How secure is SMB3 over Internet? I see that Microsoft Azure is doing SMB3 shares over internet so they seem to think it's secure. > > Does the SAMBA team recommend this type of scenario OR do they

Thanks for the reply. I was checking this with several IT professionals and the consensus was that it should never be exposed over the internet (even SMB3.0) and they all recommended to use it over SSH or VPN. A couple of people said there are more security professionals venting/using/supporting SSH which is why they recommend using that. I was just wondering, would this just be the leftover

ACL management can be done for SMB2/SMB3 ACLs with two common tools depending on your preference. smbcacls (somewhat similar to using cacls.exe or icacls.exe in Windows but specifying the UNC name rather than a local path name). smbcacls sets up and tears down a network connection each time it is run and uses Samba user space code. or setcifsacl/getcifsacl (which calls cifs.ko to access the

Hi All, The man page for smb.conf says that 'client max protocol = default' is the same as 'client max protocol = NT1' for the HEAD samba version. Is there some reason I should not change that to SMB3? Thanks! Chad.

Dear all, what is about the support for POSIX ACL in Samba protocol implementation of SMB2 and SMB3? >From what I extracted from SNIA and SambaXP developer conference talks and as well as the official Samba Wiki, support for POSIX ACL in SMB2 and SMB3 has been completely abandonned. Am I right? If so, is there any other possibility to allow Linux Clients to natively access access control lists

Hi, I am running samba-4.1.4 on my Fedora OS. I have provided the "client max protocol = SMB3" and "server max protocol = SMB3" parameters in smb.conf file I'm able to get only SMB2.1 packets using wireshark after fileshare access from my windows 7 machine. And not SMB3 packets. SMB2->NegotiateProtocol Response 0x0202 0x0210 Samba-4.1.4 is supporting SMB3 also. So

Hi, I want to use the SMB3 POSIX extensions in the latest Samba (with SMB3.1.1, vers=3.1.1). By following the user manual, I have added the "posix" mount option when mounting, but it shows the following error messages. Error messages: [xxxxx] CIFS VFS: Server does not support mounting with posix SMB3.11 extensions. [xxxxx] CIFS VFS: cifs_mount failed w/return code = -95 Mount option:

On Tue, Feb 26, 2019 at 09:03:41AM -0800, Jeremy Allison via samba wrote: > > Check out the latest cifsfs code. I think Steve > and Aurelian and Ronnie added an ioctl for this. > > I'm here at Vault in Boston with Steve, I'll ask > him :-). Steve says there are two utilities in Linux, getcifsacl and setcifsacl that use a custom ioctl inside the Linux cifsfs kernel

Hi all, Quick question - does Samba server still support Unix extensions when connecting over SMB3? My Linux client recently got upgraded to a CIFS module version that uses SMB3 by default, and since then I lost the ability to create symlinks on my CIFS shares. Running "mount" shows the share mounted with the "nounix" option. If I follow the advice in dmesg and add the

I know SMB2 support was added for the smbclient in samba 4.1.0, but was SMB3 support also added ? Is there a way to just make smbclient ? Mike

Hello.. My server have this settings in [global] section: max protocol = smb3 min protocol = smb2 When I try connect to server using my clients (Centos 7.3/Ubuntu 16.04) I can't because clients still trying NT1. I must explicity add in smb.conf on clients the option ' client max protocol = smb3' and the connections works again. The question is: If I have defined the min and max

On Wed, Aug 31, 2016 at 10:29:51AM +0200, Michael Adam via samba wrote: > On 2016-08-31 at 08:13 +0000, zhengbin.08747 at h3c.com wrote: > > When carring out the test, I have a wireshark process run. It is confirmed that protocol smb3 is used. In the tree connection phase, server's response to client claims that it does not support DFS/Continuous Availability. > > I'm

Hi, My name is Shyam Prasad. I work at Microsoft in the Azure Files team. For the past few days, I've been working on getting the Azure Linux VMs to join the AD domain in Azure, login as domain users, and mount Azure file shares over SMB3. Most things work fine. Except that I need perform a few Kerberos related tasks manually, for the SMB3 mount to work with domain user credentials. I did

hi Michael Adam: Thanks for you work on samba. Here I am looking for some advice and your help. I have been stuck in continuous availability of samba 4.3.9 for two weeks. Continuous availability in SMB3 is an attractive feature and I am strugling to enable it. smb.conf, ctdb.conf are attached. Cluster file system is cephfs and mount to /CephStorage client: Windows 8 Pro root at node0:~# samba

Hello, My team is in search of a way to mount SMB3/CIFS shares from a Linux client with encryption enabled (and with reasonable performance). After some research, it appears that the kernel CIFS client (mount.cifs) lacks encryption support, while the Samba client library (libsmbclient) doesn't offer mount functionality. Looking at the recent commit "examples: Add smb2mount"

Hi, I can access centos's samba via windows 7, but fail via windows 10. Why? Thanks! Regards Andrew

The SMB3 POSIX extensions is different from the old Unix extensions. The Unix extensions can only support vers=1.0, but the new SMB3 POSIX extensions can support SMB3.1.1, vers=3.1.1. You can check this 2018 presentation slides: https://www.snia.org/sites/default/files/SDC/2018/presentations/SMB/Steve_French_SMB311.pdf Page 12 shows that POSIX extensions has been added. Page 22 shows that SMB3

Hi, is there an option in samba 4.1.x to have an smbd require SMB3 encrypted transport on share level? I can't seem to find anything like it. Thanks, -- Michael Weiser science + computing ag Senior Systems Engineer Geschaeftsstelle Duesseldorf Faehrstrasse 1 phone: +49 211 302 708 32 D-40221 Duesseldorf fax: +49 211 302 708 50

Hi, windows 7 supports smb3. If centos's samba server suport smb3, how to make windows 10 support smb3 too? Thanks! Regards Andrew At 2019-09-13 15:47:34, "John Hodrien" <J.H.Hodrien at leeds.ac.uk> wrote: >On Thu, 12 Sep 2019, me at tdiehl.org wrote: > >> Why? This is NOT necessary for win 10 to work. I do not even know if it will >> work with

FreeBSD 12 Samba 4.8.12 Samba is not showing up on my Win 10 PRO machine. I can access the shares if I use the machines hostname or IP, though. How can I determine what version of ?smb? is being used? I have set ?client max protocol = SMB3? in the config file; however, I am not sure if it is being used. Thanks! -- Gerard -------------- next part -------------- A non-text attachment was