Print this page
NEX-15581 SMB keep-alive feature is just noise
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
NEX-5665 SMB2 oplock leases
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
NEX-15581 SMB keep-alive feature is just noise
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
NEX-5665 SMB2 oplock leases
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
NEX-9497 SMB should bypass ACL traverse checking
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
NEX-10019 SMB server min_protocol setting
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
NEX-5273 SMB 3 Encryption
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
NEX-3549 smb(4) man page is out of date.
Reviewed by: Yuri Pankov <Yuri.Pankov@nexenta.com>
NEX-3611 CLONE NEX-3550 Replace smb2_enable with max_protocol
Reviewed by: Yuri Pankov <Yuri.Pankov@nexenta.com>
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/man/man4/smb.4.man.txt
+++ new/usr/src/man/man4/smb.4.man.txt
1 1 SMB(4) File Formats and Configurations SMB(4)
2 2
3 3
4 4
5 5 NAME
6 6 smb - configuration properties for Solaris CIFS server
7 7
8 8 DESCRIPTION
9 9 Behavior of the Solaris CIFS server is defined by property values that
10 10 are stored in the Service Management Facility, smf(5).
11 11
12 12
13 13 An authorized user can use the sharectl(1M) command to set global
14 14 values for these properties in SMF.
15 15
16 16
17 17 The following list describes the properties:
18 18
19 19 ads_site
20 20
21 21 Specifies the site configured in DNS to look up Active Directory
22 22 information. Sites provide a mechanism to partition or delegate
23 23 administration and policy management, which are typically used in
24 24 large or complex domains.
25 25
|
↓ open down ↓ |
25 lines elided |
↑ open up ↑ |
26 26 The value should not be set if you do not have a local Active
27 27 Directory site. By default, no value is set.
28 28
29 29
30 30 autohome_map
31 31
32 32 Specifies the full path for the SMD autohome map file, smbautohome.
33 33 The default path is /etc.
34 34
35 35
36 + bypass_traverse_checking
37 +
38 + When set, allows the SMB server to bypass ACL "traverse" checks.
39 + The default value is true, for Windows compatibility. If this
40 + parameter is false, ACL checks require that "traverse" (directory
41 + execute) is granted on every directory above the directory the SMB
42 + client tries to access. Windows shares are normally setup with the
43 + higher level directories not specifically granting such access.
44 +
45 +
36 46 disposition
37 47
38 48 A value that controls whether to disconnect the share or proceed if
39 49 the map command fails. The disposition property only has meaning
40 50 when the map property has been set. Otherwise it will have no
41 51 effect.
42 52
43 53 disposition = [ continue | terminate ]
44 54
45 55
46 56
47 57 continue
48 58
49 59 Proceed with share connection if the map command fails. This is
50 60 the default in the event that disposition is not specified.
51 61
52 62
53 63 terminate
54 64
55 65 Disconnect the share if the map command fails.
|
↓ open down ↓ |
10 lines elided |
↑ open up ↑ |
56 66
57 67
58 68
59 69 ddns_enable
60 70
61 71 Enables or disables dynamic DNS updates. A value of true enables
62 72 dynamic updates, while a value of false disables dynamic updates.
63 73 By default, the value is false.
64 74
65 75
66 - ipv6_enabled
76 + encrypt
67 77
78 + Controls SMB3 Encryption. For requests on a particular share, the
79 + server's behavior is controlled by the stricter of this option and
80 + the per-share "encrypt" option.
81 +
82 + When set to disabled, the server will not ask clients to encrypt
83 + requests. When set to enabled, the server will ask clients to
84 + encrypt requests, but will not require that they do so. Any message
85 + that can be encrypted will be encrypted. When set to required, the
86 + server will deny access to or disconnect any client that does not
87 + support encryption or fails to encrypt requests that they should.
88 +
89 + In other words, the enabled behavior is that any message that CAN
90 + be encrypted SHOULD be encrypted, while the required behavior is
91 + that any message that CAN be encrypted MUST be encrypted.
92 +
93 +
94 + ipv6_enable
95 +
68 96 Enables IPv6 Internet protocol support within the CIFS Service.
69 97 Valid values are true and false. The default value is false.
70 98
71 99
72 100 keep_alive
73 101
74 102 Specifies the number of seconds before an idle SMB connection is
75 103 dropped by the Solaris CIFS server. If set to 0, idle connections
76 104 are not dropped. Valid values are 0 and from 20 seconds and above.
77 - The default value is 5400 seconds.
105 + The default value is 0.
78 106
79 107
80 108 lmauth_level
81 109
82 110 Specifies the LAN Manager (LM) authentication level. The LM
83 111 compatibility level controls the type of user authentication to use
84 - in workgroup mode or domain mode. The default value is 3.
112 + in workgroup mode or domain mode. The default value is 4.
85 113
86 114 The following describes the behavior at each level.
87 115
88 116 2
89 117 In Windows workgroup mode, the Solaris CIFS server
90 118 accepts LM, NTLM, LMv2, and NTLMv2 requests. In domain
91 119 mode, the SMB redirector on the Solaris CIFS server
92 120 sends NTLM requests.
93 121
94 122
95 123 3
96 124 In Windows workgroup mode, the Solaris CIFS server
97 125 accepts LM, NTLM, LMv2, and NTLMv2 requests. In domain
98 126 mode, the SMB redirector on the Solaris CIFS server
99 127 sends LMv2 and NTLMv2 requests.
100 128
101 129
102 130 4
103 131 In Windows workgroup mode, the Solaris CIFS server
104 132 accepts NTLM, LMv2, and NTLMv2 requests. In domain
105 133 mode, the SMB redirector on the Solaris CIFS server
106 134 sends LMv2 and NTLMv2 requests.
107 135
108 136
109 137 5
110 138 In Windows workgroup mode, the Solaris CIFS server
111 139 accepts LMv2 and NTLMv2 requests. In domain mode, the
112 140 SMB redirector on the Solaris CIFS server sends LMv2
113 141 and NTLMv2 requests.
114 142
115 143
116 144
117 145 map
118 146
119 147 The value is a command to be executed when connecting to the share.
120 148 The command can take the following arguments, which will be
121 149 substituted when the command is exec'd as described below:
122 150
123 151 %U
124 152
125 153 Windows username.
126 154
127 155
128 156 %D
129 157
130 158 Name of the domain or workgroup of %U.
131 159
132 160
133 161 %h
134 162
135 163 The server hostname.
136 164
137 165
138 166 %M
139 167
140 168 The client hostname, or "" if not available.
141 169
142 170
143 171 %L
144 172
145 173 The server NetBIOS name.
146 174
147 175
148 176 %m
149 177
150 178 The client NetBIOS name, or "" if not available. This option is
151 179 only valid for NetBIOS connections (port 139).
152 180
153 181
154 182 %I
155 183
156 184 The IP address of the client machine.
157 185
158 186
159 187 %i
160 188
161 189 The local IP address to which the client is connected.
162 190
163 191
164 192 %S
165 193
166 194 The name of the share.
167 195
168 196
169 197 %P
170 198
171 199 The root directory of the share.
172 200
173 201
174 202 %u
175 203
176 204 The UID of the Unix user.
|
↓ open down ↓ |
82 lines elided |
↑ open up ↑ |
177 205
178 206
179 207
180 208 max_protocol
181 209
182 210 Specifies the maximum SMB protocol level that the SMB service
183 211 should allow clients to negotiate. The default value is 2.1.
184 212 Valid settings include: 1, 2.1, 3.0
185 213
186 214
215 + min_protocol
216 +
217 + Specifies the minimum SMB protocol level that the SMB service
218 + should allow clients to negotiate. The default value is 1. Valid
219 + settings include: 1, 2.1, 3.0
220 +
221 +
187 222 max_workers
188 223
189 224 Specifies the maximum number of worker threads that will be
190 225 launched to process incoming CIFS requests. The SMB max_mpx value,
191 226 which indicates to a client the maximum number of outstanding SMB
192 227 requests that it may have pending on the server, is derived from
193 228 the max_workers value. To ensure compatibility with older versions
194 229 of Windows the lower 8-bits of max_mpx must not be zero. If the
195 230 lower byte of max_workers is zero, 64 is added to the value. Thus
196 231 the minimum value is 64 and the default value, which appears in
197 232 sharectl(1M) as 1024, is 1088.
198 233
199 234
235 + netbios_enable
236 +
237 + Controls whether NetBIOS services are active, including the NetBIOS
238 + listener (port 139), NetBIOS datagram service (port 138) and the
239 + NetBIOS name service (port 137). The default value is false.
240 +
241 +
200 242 netbios_scope
201 243
202 244 Specifies the NetBIOS scope identifier, which identifies logical
203 245 NetBIOS networks that are on the same physical network. When you
204 246 specify a NetBIOS scope identifier, the server filters the number
205 247 of machines that are listed in the browser display to make it
206 248 easier to find other hosts. The value is a text string that
207 249 represents a domain name. By default, no value is set.
208 250
209 251
252 + oplock_enable
253 +
254 + Controls whether "oplocks" may be granted by the SMB server. The
255 + term "oplock" is short for "opportunistic lock", which is the
256 + legacy name for cache delegations in SMB. By default, oplocks are
257 + enabled. Note that if oplocks are disabled, file I/O perfrormance
258 + may be severely reduced.
259 +
260 +
210 261 pdc
211 262
212 - Specifies the preferred IP address for the domain controller. This
263 + Specifies the host name of the preferred domain controller. This
213 264 property is sometimes used when there are multiple domain
214 265 controllers to indicate which one is preferred. If the specified
215 266 domain controller responds, it is chosen even if the other domain
216 267 controllers are also available. By default, no value is set.
217 268
218 269
270 + print_enable
271 +
272 + Controls whether the SMB printing service is active. The default
273 + value is false.
274 +
275 +
219 276 restrict_anonymous
220 277
221 278 Disables anonymous access to IPC$, which requires that the client
222 279 be authenticated to get access to MSRPC services through IPC$. A
223 280 value of true disables anonymous access to IPC$, while a value of
224 281 false enables anonymous access.
225 282
226 283
227 284 signing_enabled
228 285
229 286 Enables SMB signing. When signing is enabled but not required it is
230 287 possible for clients to connect regardless of whether or not the
231 288 client supports SMB signing. If a packet has been signed, the
232 289 signature will be verified. If a packet has not been signed it will
233 290 be accepted without signature verification. Valid values are true
234 291 and false. The default value is false.
235 292
|
↓ open down ↓ |
7 lines elided |
↑ open up ↑ |
236 293
237 294 signing_required
238 295
239 296 When SMB signing is required, all packets must be signed or they
240 297 will be rejected, and clients that do not support signing will be
241 298 unable to connect to the server. The signing_required setting is
242 299 only taken into account when signing_enabled is true. Valid values
243 300 are true and false. The default value is false.
244 301
245 302
303 +
246 304 system_comment
247 305
248 306 Specifies an optional description for the system, which is a text
249 307 string. This property value might appear in various places, such as
250 308 Network Neighborhood or Network Places on Windows clients. By
251 309 default, no value is set.
252 310
253 311
254 312 traverse_mounts
255 313
256 314 The traverse_mounts setting determines how the SMB server presents
257 315 sub-mounts underneath an SMB share. When traverse_mounts is true
258 316 (the default), sub-mounts are presented to SMB clients like any
259 317 other subdirectory. When traverse_mounts is false, sub-mounts are
260 318 not shown to SMB clients.
261 319
262 320
263 321 unmap
264 322
265 323 The value is a command to be executed when disconnecting the share.
266 324 The command can take the same substitutions listed on the map
267 325 property.
268 326
269 327
270 328 wins_exclude
271 329
272 330 Specifies a comma-separated list of network interfaces that should
273 331 not be registered with WINS. NetBIOS host announcements are made on
274 332 excluded interfaces.
275 333
276 334
277 335 wins_server_1
278 336
279 337 Specifies the IP address of the primary WINS server. By default, no
280 338 value is set.
281 339
282 340
283 341 wins_server_2
284 342
285 343 Specifies the IP address of the secondary WINS server. By default,
286 344 no value is set.
287 345
288 346
289 347 ATTRIBUTES
290 348 See the attributes(5) man page for descriptions of the following
291 349 attributes:
292 350
293 351
294 352
295 353
296 354 +--------------------+-----------------+
|
↓ open down ↓ |
41 lines elided |
↑ open up ↑ |
297 355 | ATTRIBUTE TYPE | ATTRIBUTE VALUE |
298 356 +--------------------+-----------------+
299 357 |Interface Stability | Uncommitted |
300 358 +--------------------+-----------------+
301 359
302 360 SEE ALSO
303 361 sharectl(1M), smbadm(1M), smbd(1M), smbstat(1M), attributes(5), smf(5)
304 362
305 363
306 364
307 - September 25, 2009 SMB(4)
365 + April 23, 2015 SMB(4)
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX