encryption on network

[Jeremy Allison]

On Thu, Jul 28, 2011 at 05:59:41PM -0500, Christopher R. Hertel wrote:
> The network traffic is not encrypted.
> 
> The SMB protocol does not provide any mechanism for encrypting traffic
> between clients and servers.

As shipped by Microsoft :-). The UNIX extensions to SMB allow
encrypted traffic between clients and servers and Samba has
supported this for a long time (smbclient -e will encrypt
traffic).

> The only good way to ensure that the traffic
> is encrypted is to create a VPN and ensure that SMB traffic is always
> contained within the VPN.

Or use Samba smbclient to a smbd server :-). Of course, we
really need this in the Linux CIFS client.

Steve French - where's my encrypted transport code !!! (your
monthly ping on this :-).

Jeremy.