Turning off SMB1 make slashdot and theregister !

[ronnie sahlberg]

The solution is simple.
This is what I propose:

Next major release SMB1 is dropped and the code is deleted.

Some people do care very much about ms-dos / os/2 and amiga 1.3 users.
These people can fork
samba and continue to support a smb1-legacy version of samba and
backport all patches from upstream to this
fork. Volunteers?

Alternatively, ms-dos. os/2 warp and amiga 1.3 users can still
continue to use old and obsolete versions of samba
if they are not able to fix their clients to use smb2.



On Fri, Jul 26, 2019 at 5:28 AM Andrew Bartlett via samba-technical
<samba-technical at lists.samba.org> wrote:
>
> On Thu, 2019-07-25 at 20:18 +0100, Rowland penny via samba-technical
> wrote:
> > On 25/07/2019 19:59, Andrew Bartlett via samba-technical wrote:
> > > We can't do that until we provide a reasonable way for SMB1 clients
> > > to
> > > connect, probably via a SMB1 -> SMB2 proxy based on the NTVFS file
> > > server (where we had such a prototype until very recently).
> > >
> > > It won't be perfect SMB1, but needs to be enough for basic
> > > operation.
> > >
> > > I'm quite convinced Samba and SMB1 are critical infrastructure in
> > > many
> > > places and while we may dislike SMB1 for good reasons the
> > > alternative
> > > is to force such installations to rely on what will in 2 years be
> > > an
> > > unsupported and therefore soon an insecure version.
> > >
> > > I'm not comfortable with that as an outcome, so we need to provide
> > > them
> > > a way forward.
> > >
> > > Andrew Bartlett
> > >
> >
> > Andrew, why do we need to keep anything like SMBv1 around in the long
> > term ?
> >
> > If you do an internet search, you will find blogs from Microsoft
> > employees nearly begging people not to use SMBv1 and the fact that
> > new
> > Windows 10 installs have SMBv1 turned off by default, leads me to
> > think
> > that it wont be long before it is totally removed from windows.
> >
> > If SMBv1 is removed from windows, then the major user base will
> > disappear, so are you saying Samba should keep SMBv1 around just for
> > Unix users ?
>
> I'm more thinking about the DOS users, the OS/2 users and the Windows
> 3.11 users.
>
> > If you are considering the Network Browsing problem, then there are
> > other ways to do this.
>
> It isn't browsing.  Samba is the glue that holds a lot of things
> together.
>
> I'm sure we will find out a little of this in a year or so, when 4.11
> starts to be seriously used in production.
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                       https://samba.org/~abartlet/
> Authentication Developer, Samba Team  https://samba.org
> Samba Developer, Catalyst IT
> https://catalyst.net.nz/services/samba
>
>
>
>