Samba SMB protocol encryption support

Guillaume Hiet <[email protected]>
Newsgroups gmane.linux.file-systems.cifs
Message-ID <[email protected]>
Hi List,

I would like to know if cifs module has (even experimental) support for
SMB protocol encryption (by setting option "smb encrypt=mandatory" in
Samba server configuration file).

We use Debian's Samba server v3.5rc2 and this feature works fine with
smbclient using "-e" option. However, we do not succeed in mounting the
share with cifs module (Linux Debian kernel 2.6.32-8) using "mount -t
cifs -o user=xxx,sec=krb5i,seal //my_host/my_share /my_mountpoint". Does
the "seal" option correspond to SMB protocol encryption?

We activate the following options in /proc/fs/cifs/ :
- experimental = 1
- LinuxExtensionsEnable = 1
- cifsFYI = 3
- SecurityFlags = 0x07

The signing feature seams to work well by setting "client/server signing
= mandatory" in smb.conf and using "mount  -t cifs -o
user=xxx,sec=krb5i" (using "mount  -t cifs -o user=xxx,sec=krb5" fail as
expected).

Thanks,
-- 
------------------------------------------------------------------------
*Guillaume Hiet*
*/Ingénieur Expert SSI/*
[email protected] <mailto:[email protected]>
------------------------------------------------------------------------
*AMOSSYS SAS*
4 bis, allée du Bâtiment
35000 RENNES
Tél : 02 99 23 15 79
http://www.amossys.fr
Agence : Rennes
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.