Discussion:
SMB 3 encryption
Zane Zakraisek
2013-02-04 18:33:10 UTC
Permalink
I read in a PowerPoint made my Michael Adams that Samba 4.0.0
has default support for SMB3. Along with this it says that the SMB session
and initiation encryption development is completed. In Server 2012, the
encryption of SMB3 for shares has to be enabled, is there a way to enable
this encryption on Samba 4? Thanks
Christian Ambach
2013-02-05 18:55:31 UTC
Permalink
Post by Zane Zakraisek
I read in a PowerPoint made my Michael Adams that Samba 4.0.0
has default support for SMB3. Along with this it says that the SMB session
and initiation encryption development is completed. In Server 2012, the
encryption of SMB3 for shares has to be enabled, is there a way to enable
this encryption on Samba 4? Thanks
Have a look at the "smb encrypt" parameter.

Not sure if this works with Samba 4.0, but it should be in master.

Cheers,
Christian
TAKAHASHI Motonobu
2013-03-04 13:39:42 UTC
Permalink
From: Christian Ambach <ambi at samba.org>
Date: Tue, 05 Feb 2013 19:55:31 +0100
Post by Christian Ambach
Post by Zane Zakraisek
I read in a PowerPoint made my Michael Adams that Samba 4.0.0
has default support for SMB3. Along with this it says that the SMB session
and initiation encryption development is completed. In Server 2012, the
encryption of SMB3 for shares has to be enabled, is there a way to enable
this encryption on Samba 4? Thanks
Have a look at the "smb encrypt" parameter.
Not sure if this works with Samba 4.0, but it should be in master.
As far as I know, this is Samba specific feature and not compatible with
SMB3 encryption. See smb.conf(5).

--
TAKAHASHI Motonobu <monyo at monyo.com> / @damemonyo
facebook.com/takahashi.motonobu
Jeremy Allison
2013-03-04 22:47:08 UTC
Permalink
Post by TAKAHASHI Motonobu
From: Christian Ambach <ambi at samba.org>
Date: Tue, 05 Feb 2013 19:55:31 +0100
Post by Christian Ambach
Post by Zane Zakraisek
I read in a PowerPoint made my Michael Adams that Samba 4.0.0
has default support for SMB3. Along with this it says that the SMB session
and initiation encryption development is completed. In Server 2012, the
encryption of SMB3 for shares has to be enabled, is there a way to enable
this encryption on Samba 4? Thanks
Have a look at the "smb encrypt" parameter.
Not sure if this works with Samba 4.0, but it should be in master.
As far as I know, this is Samba specific feature and not compatible with
SMB3 encryption. See smb.conf(5).
Actually the "smb encrypt" is also re-used to turn on transport
level encryption with the SMB3 protocol when used with Win8
and Windows2012 server clients, as well as the samba-specific
SMB1 transport level encryption.

Jeremy.

Continue reading on narkive:
Loading...