Differences

This shows you the differences between two versions of the page.

--- ubuntu:samba:smb_protocol_versions [2019/12/08 19:13] – peter
+++ ubuntu:samba:smb_protocol_versions [2020/07/15 09:30] (current) – external edit 127.0.0.1
@@ Line 9: / Line 9: @@
-|vers=3.11|SMB3_11|Latest, more secure version|
+|vers=3.11|SMB3_11|Latest, more secure version. SMB3.11 can also be requested (vers=3.1.1).  By default SMB3 selects the SMB3_11 variant.|
-|vers=3.0|SMB3|Windows 8, Windows Server 2012|
+|vers=3.10|SMB3_10|Early Windows 10 technical preview.|
-|vers=2.1|SMB2_10|Windows 7, Windows Server 2008 R2|
+|vers=3.02|SMB3_02|Windows 8.1|
+|vers=3.0|SMB3|Windows 8, Windows Server 2012.  Mostly the same as SMB2_24|
+|vers=2.24|SMB2_24|Windows 8 beta SMB2 version.|
+|vers=2.22|SMB2_22|Early Windows 8 SMB2 version.|
+|vers=2.1|SMB2_10|Windows 7, Windows Server 2008 R2.  The default is SMB2 is selected.|
 |vers=2.0|SMB2_02|Vista SP1, Windows Server 2008|
 |vers=1.0|SMB1|NT1 i.e. Windows 95, NT 4.0|
@@ Line 23: / Line 27: @@
 Add the following lines to /etc/samba/smb.conf
+<WRAP todo>
+TODO: Some of these may not work - so try different combinations.  PETER=FIX this
+</WRAP>
 <file bash /etc/samba/smb.conf>
@@ Line 31: / Line 40: @@
 min protocol = SMB2
 max protocol = SMB3
+protocol = SMB2
 client ipc min protocol = SMB2
 </file>
+----
+===== Configuration to enable SMBv2 =====
+Edit smb.conf file:
+Find the [global] section and append the following line:
+<file bash /etc/samba/smb.conf>
+...
+[global]
+...
+  min protocol = SMB2
+...
+</file>
+<WRAP alert>
+WannaCry can spread via SMBv2 as well:
+https://securelist.com/blog/incidents/78351/wannacry-ransomware-used-in-widespread-attacks-all-over-the-world/
+</WRAP>
+The following gives best options:
+<file bash>
+   client min protocol = SMB2
+   client max protocol = SMB3
+</file>
+Also this works well:
+<file bash>
+server min protocol = SMB2_10
+client max protocol = SMB3
+client min protocol = SMB2_10
+</file>
+----
+===== Errors =====
+Server:
+<code bash>
+min protocol = SMB2
+</code>
+Client:
+<code bash>
+smbclient -U=username -N –command=”dir Directory/*” //192.168.0.1/Directory
+</code>
+Error:
+<code bash>
+protocol negotiation failed: NT_STATUS_INVALID_NETWORK_RESPONSE
+</code>
+Try to Use:
+<code bash>
+protocol = SMB2
+</code>