如何加密 Samba 流量?

如何加密 Samba 流量?

我该如何加密 Samba 在服务器和客户端之间通信的流量?我的无加密设置如下:

/etc/samba/smb.conf:

[global]
   workgroup = WORKGROUP
   server string = %h server (Samba, Bananian)
   dns proxy = no
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   server role = standalone server
   passdb backend = tdbsam
   obey pam restrictions = yes
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   map to guest = bad user
   usershare allow guests = yes
   follow symlinks = yes
   wide links = yes
   unix extensions = no

[myfiles]
   path = /mnt/drive01
   available = yes
   read only = no
   browsable = yes
   public = yes
   writable = yes

如果我SMB Write AndX Request以纯文本形式分析数据包。因此,我认为向 Samba 添加加密会添加smb encrypt = mandatory[global]部分,但这会导致客户端 (nemo) 无法连接到 Samba 共享,[myfiles]并显示以下消息:Error: Failed to mount Windows share: File exists. Please select another viewer and try again.

我必须做什么才能加密服务器和客户端之间的 Samba 流量?有没有办法选择加密类型(例如带有 CBC 的 AES 256...)?

相关内容