Re: [leaf-user] CIFS Mount

Erich thanks!

According to my research - it is a compile time option in the module 
config.  Notes below.

I am not actually using SAMBA on the Leaf box - just the CIFS module. 
I'd modify SAMBA on the target NAS to use a more modern/secure option if 
I could.  That would be a better solution.

- Bob

From:  https://github.com/torvalds/linux/blob/master/fs/cifs/Kconfig

My guess is the default is now "n".


=====

config CIFS_ALLOW_INSECURE_LEGACY
	bool "Support legacy servers which use less secure dialects"
	depends on CIFS
	default y
	help
	  Modern dialects, SMB2.1 and later (including SMB3 and 3.1.1), have 
additional security features, including protection against 
man-in-the-middle attacks and stronger crypto hashes, so the use of 
legacy dialects (SMB1/CIFS and SMB2.0) is discouraged.

	  Disabling this option prevents users from using vers=1.0 or vers=2.0 
on mounts with cifs.ko

	  If unsure, say Y.
=====


On 9/23/2019 7:28 PM, Erich Titl wrote:
> Hi Bob
> 
> Am 23.09.2019 um 15:43 schrieb Robert K Coffman Jr. -Info From Data Corp.:
>> I'm looking at upgrading from 6.04 to 6.22.
>>
>> One issue I've run into is I have been using SMB mounts to Buffalo
>> Linkstation NAS devices that support SMB 2.0, but no higher.  And no NFS...
>>
>> At some point, support for this was dropped, resulting in the following
>> message when I try to mount those shares:
>>
>> CIFS VFS: vers=2.0 mount not permitted when legacy dialects disabled
>>
>> Is there any chance we can enable legacy dialects for cifs or is this
>> just a bad idea?
> 
> If I understand the configuration correctly this is something you need
> to enable in your samba configuration and not at compile time.
> 
> The current version of samba for LEAF is 3.6.25 whereas samba.org is
> somewhere in the 4.x range. I have not looked for incompatibilities.
> 
> cheers
> 
> ET
> 
> 
> 
> 
> ---
> Diese E-Mail wurde von AVG auf Viren geprüft.
> http://www.avg.com
> 
> 
> 
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>