☰

smb.conf 最小协议 = 远程（本地网络）机器的 SMB2 超时

tag-icon • tag-icon debian security samba smb
smb.conf 最小协议 = 远程（本地网络）机器的 SMB2 超时

我尝试将其纳入其中min protocol = SMB2以提高本地 Linux 计算机的安全性。但当我这样做时，我time out从 KDE 和Operation Not SupportedCLI 中获取信息。

删除最小协议规定可以解决此问题。知道为什么吗？

测试参数：

Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[msc_media_public]"
Processing section "[msc_media_personal]"
Processing section "[printers]"
Processing section "[print$]"
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Server role: ROLE_STANDALONE

Press enter to see a dump of your service definitions

定义：

[global]
        workgroup = SG1
        server role = standalone server
        map to guest = Bad User
        obey pam restrictions = Yes
        pam password change = Yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
        unix password sync = Yes
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        server min protocol = SMB3
        dns proxy = No
        usershare allow guests = Yes
        panic action = /usr/share/samba/panic-action %d
        idmap config * : backend = tdb


[homes]
        comment = Home Directories
        valid users = %S
        read only = No
        create mask = 0700
        directory mask = 0700
        inherit acls = Yes


[msc_media_public]
        comment = REDACTED
        path = /xx/xx/xx/xx/xx
        force group = mediagroup
        read only = No
        create mask = 0664
        directory mask = 0775


[msc_media_personal]
        comment = REDACTED
        path = /xx/xx/xx/xx/xx
        read only = No
        create mask = 0775
        directory mask = 0775
        guest ok = Yes


[printers]
        comment = All Printers
        path = /var/spool/samba
        create mask = 0600
        printable = Yes
        print ok = Yes
        browseable = No


[print$]
        comment = Printer Drivers
        path = /var/lib/samba/printers

我用于远程安装此驱动器的 /etc/fstab 条目是：

//xx.xx.xx.xx/sharename /local/name/ cifs uid=1001,gid=1002,username=user,password=pass 0 0

答案1

为了获得更稳定的连接（在不活动时不会断开）以及在进行 SMB 传输时获得更高的性能，您需要将“vers”选项添加到 fstab 挂载选项中，至少使用 2.1 版本，如“vers=2.1” ，然后重新挂载您的 SMB 挂载点。

看CIFS 随机丢失与 Windows 共享的连接更多细节。

否则，默认情况下（通常）协商会尝试将它们安装为 CIFS 1.0。

相关内容