SMB 3 encryption

[Jeremy Allison]

On Mon, Mar 04, 2013 at 10:39:42PM +0900, TAKAHASHI Motonobu wrote:
> From: Christian Ambach <ambi at samba.org>
> Date: Tue, 05 Feb 2013 19:55:31 +0100
> 
> > On 02/04/2013 07:33 PM, Zane Zakraisek wrote:
> >> I read in a PowerPoint made my Michael Adams that Samba 4.0.0
> >> has default support for SMB3. Along with this it says that the SMB session
> >> and initiation encryption development is completed. In Server 2012, the
> >> encryption of SMB3 for shares has to be enabled, is there a way to enable
> >> this encryption on Samba 4? Thanks
> > 
> > Have a look at the "smb encrypt" parameter.
> > 
> > Not sure if this works with Samba 4.0, but it should be in master.
> 
> As far as I know, this is Samba specific feature and not compatible with
> SMB3 encryption. See smb.conf(5).

Actually the "smb encrypt" is also re-used to turn on transport
level encryption with the SMB3 protocol when used with Win8
and Windows2012 server clients, as well as the samba-specific
SMB1 transport level encryption.

Jeremy.