Print this page
NEX-15581 SMB keep-alive feature is just noise
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
NEX-5665 SMB2 oplock leases
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
NEX-15581 SMB keep-alive feature is just noise
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
NEX-5665 SMB2 oplock leases
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
NEX-9497 SMB should bypass ACL traverse checking
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
NEX-10019 SMB server min_protocol setting
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
NEX-5273 SMB 3 Encryption
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
NEX-3549 smb(4) man page is out of date.
Reviewed by: Yuri Pankov <Yuri.Pankov@nexenta.com>
NEX-3611 CLONE NEX-3550 Replace smb2_enable with max_protocol
Reviewed by: Yuri Pankov <Yuri.Pankov@nexenta.com>
*** 31,40 ****
--- 31,50 ----
Specifies the full path for the SMD autohome map file, smbautohome.
The default path is /etc.
+ bypass_traverse_checking
+
+ When set, allows the SMB server to bypass ACL "traverse" checks.
+ The default value is true, for Windows compatibility. If this
+ parameter is false, ACL checks require that "traverse" (directory
+ execute) is granted on every directory above the directory the SMB
+ client tries to access. Windows shares are normally setup with the
+ higher level directories not specifically granting such access.
+
+
disposition
A value that controls whether to disconnect the share or proceed if
the map command fails. The disposition property only has meaning
when the map property has been set. Otherwise it will have no
*** 61,89 ****
Enables or disables dynamic DNS updates. A value of true enables
dynamic updates, while a value of false disables dynamic updates.
By default, the value is false.
! ipv6_enabled
Enables IPv6 Internet protocol support within the CIFS Service.
Valid values are true and false. The default value is false.
keep_alive
Specifies the number of seconds before an idle SMB connection is
dropped by the Solaris CIFS server. If set to 0, idle connections
are not dropped. Valid values are 0 and from 20 seconds and above.
! The default value is 5400 seconds.
lmauth_level
Specifies the LAN Manager (LM) authentication level. The LM
compatibility level controls the type of user authentication to use
! in workgroup mode or domain mode. The default value is 3.
The following describes the behavior at each level.
2
In Windows workgroup mode, the Solaris CIFS server
--- 71,117 ----
Enables or disables dynamic DNS updates. A value of true enables
dynamic updates, while a value of false disables dynamic updates.
By default, the value is false.
! encrypt
+ Controls SMB3 Encryption. For requests on a particular share, the
+ server's behavior is controlled by the stricter of this option and
+ the per-share "encrypt" option.
+
+ When set to disabled, the server will not ask clients to encrypt
+ requests. When set to enabled, the server will ask clients to
+ encrypt requests, but will not require that they do so. Any message
+ that can be encrypted will be encrypted. When set to required, the
+ server will deny access to or disconnect any client that does not
+ support encryption or fails to encrypt requests that they should.
+
+ In other words, the enabled behavior is that any message that CAN
+ be encrypted SHOULD be encrypted, while the required behavior is
+ that any message that CAN be encrypted MUST be encrypted.
+
+
+ ipv6_enable
+
Enables IPv6 Internet protocol support within the CIFS Service.
Valid values are true and false. The default value is false.
keep_alive
Specifies the number of seconds before an idle SMB connection is
dropped by the Solaris CIFS server. If set to 0, idle connections
are not dropped. Valid values are 0 and from 20 seconds and above.
! The default value is 0.
lmauth_level
Specifies the LAN Manager (LM) authentication level. The LM
compatibility level controls the type of user authentication to use
! in workgroup mode or domain mode. The default value is 4.
The following describes the behavior at each level.
2
In Windows workgroup mode, the Solaris CIFS server
*** 182,191 ****
--- 210,226 ----
Specifies the maximum SMB protocol level that the SMB service
should allow clients to negotiate. The default value is 2.1.
Valid settings include: 1, 2.1, 3.0
+ min_protocol
+
+ Specifies the minimum SMB protocol level that the SMB service
+ should allow clients to negotiate. The default value is 1. Valid
+ settings include: 1, 2.1, 3.0
+
+
max_workers
Specifies the maximum number of worker threads that will be
launched to process incoming CIFS requests. The SMB max_mpx value,
which indicates to a client the maximum number of outstanding SMB
*** 195,204 ****
--- 230,246 ----
lower byte of max_workers is zero, 64 is added to the value. Thus
the minimum value is 64 and the default value, which appears in
sharectl(1M) as 1024, is 1088.
+ netbios_enable
+
+ Controls whether NetBIOS services are active, including the NetBIOS
+ listener (port 139), NetBIOS datagram service (port 138) and the
+ NetBIOS name service (port 137). The default value is false.
+
+
netbios_scope
Specifies the NetBIOS scope identifier, which identifies logical
NetBIOS networks that are on the same physical network. When you
specify a NetBIOS scope identifier, the server filters the number
*** 205,223 ****
of machines that are listed in the browser display to make it
easier to find other hosts. The value is a text string that
represents a domain name. By default, no value is set.
pdc
! Specifies the preferred IP address for the domain controller. This
property is sometimes used when there are multiple domain
controllers to indicate which one is preferred. If the specified
domain controller responds, it is chosen even if the other domain
controllers are also available. By default, no value is set.
restrict_anonymous
Disables anonymous access to IPC$, which requires that the client
be authenticated to get access to MSRPC services through IPC$. A
value of true disables anonymous access to IPC$, while a value of
--- 247,280 ----
of machines that are listed in the browser display to make it
easier to find other hosts. The value is a text string that
represents a domain name. By default, no value is set.
+ oplock_enable
+
+ Controls whether "oplocks" may be granted by the SMB server. The
+ term "oplock" is short for "opportunistic lock", which is the
+ legacy name for cache delegations in SMB. By default, oplocks are
+ enabled. Note that if oplocks are disabled, file I/O perfrormance
+ may be severely reduced.
+
+
pdc
! Specifies the host name of the preferred domain controller. This
property is sometimes used when there are multiple domain
controllers to indicate which one is preferred. If the specified
domain controller responds, it is chosen even if the other domain
controllers are also available. By default, no value is set.
+ print_enable
+
+ Controls whether the SMB printing service is active. The default
+ value is false.
+
+
restrict_anonymous
Disables anonymous access to IPC$, which requires that the client
be authenticated to get access to MSRPC services through IPC$. A
value of true disables anonymous access to IPC$, while a value of
*** 241,250 ****
--- 298,308 ----
unable to connect to the server. The signing_required setting is
only taken into account when signing_enabled is true. Valid values
are true and false. The default value is false.
+
system_comment
Specifies an optional description for the system, which is a text
string. This property value might appear in various places, such as
Network Neighborhood or Network Places on Windows clients. By
*** 302,307 ****
SEE ALSO
sharectl(1M), smbadm(1M), smbd(1M), smbstat(1M), attributes(5), smf(5)
! September 25, 2009 SMB(4)
--- 360,365 ----
SEE ALSO
sharectl(1M), smbadm(1M), smbd(1M), smbstat(1M), attributes(5), smf(5)
! April 23, 2015 SMB(4)