我该如何加密 Samba 在服务器和客户端之间通信的流量?我的无加密设置如下:
/etc/samba/smb.conf:
[global]
workgroup = WORKGROUP
server string = %h server (Samba, Bananian)
dns proxy = no
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
server role = standalone server
passdb backend = tdbsam
obey pam restrictions = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
pam password change = yes
map to guest = bad user
usershare allow guests = yes
follow symlinks = yes
wide links = yes
unix extensions = no
[myfiles]
path = /mnt/drive01
available = yes
read only = no
browsable = yes
public = yes
writable = yes
如果我SMB Write AndX Request
以纯文本形式分析数据包。因此,我认为向 Samba 添加加密会添加smb encrypt = mandatory
到[global]
部分,但这会导致客户端 (nemo) 无法连接到 Samba 共享,[myfiles]
并显示以下消息:Error: Failed to mount Windows share: File exists. Please select another viewer and try again.
我必须做什么才能加密服务器和客户端之间的 Samba 流量?有没有办法选择加密类型(例如带有 CBC 的 AES 256...)?