[Samba] Encrypted samba mount on Linux

[Steve French]

CIFS or SMB3 mount (vers=3.0)?

I doubt that RHEL has backported the encryption feature in the kernel
client yet, but would be a good question for RHEL support.

On Mon, Apr 3, 2017 at 1:15 AM, amit kumar <amitkuma at redhat.com> wrote:

> Dear Team,
> I am trying to use this option on RHEL-6.9(samba3.6) version while
> accessing samba shares, but its not working??
> Is this kernel specific or package specific also?
>
> setup is something as this:
>                  *[RHEL 6.9]*
>                  *    [windows-client]*
>      *        [RHEL-client]*
>                         |  (samba 3.6)
>                                  |
>                      |
>                         /samba-share
>                                |
>                      |
>                     # vim /etc/samba/smb.conf
>                        |
>              |
>                         smb encrypt = mandatory
>                          |
>              |
>                         |              <=========Not
> working===============      |
>                  |
>                         |
>   <=========Not working===============                                 |
>
> How to make this Working???
>
> Thanks in Advance
> Amit
>
> On 04/01/2017 06:29 AM, Steve French via samba wrote:
>
> 4.11 - But am hoping it will be broadly backported
>
> On Fri, Mar 31, 2017 at 7:52 PM, Draxter <admin at draxter.me> <admin at draxter.me> wrote:
>
>
> Thanks Steve.
>
>
> That's great news. Pretty recent commit. Which kernel version (onward) is
> it in?
>
>
> Regards,
>
> Draxter.
>
>
> On 01/04/17 00:49, Steve French wrote:
>
> Kernel cifs supports encryption!! (Thank you Pavel for good work, redoing
> the transport layer for this!).
>
> See e.g. this series which was merged a couple months ago into mainline
> Linux kernel:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/
> linux.git/commit/fs/cifs?id=ae6f8dd4d0c87bfb72da9d9b56342adf53e69c31
>
>
> mount -t cifs //localhost/test /mnt -o vers=3.0,seal ....
>
> See attached screenshot of it in action to Samba (just did a quick mount
> and displayed wireshark trace of the data so you could see)
>
>
>
> On Fri, Mar 31, 2017 at 6:39 PM, Jeremy Allison <jra at samba.org> <jra at samba.org> wrote:
>
>
> On Sat, Apr 01, 2017 at 12:20:23AM +0100, Draxter via samba wrote:
>
> Hi all,
>
> My server machine is running samba version 4.4.4 on Linux with 'smb
> encryption = mandatory' option.
>
> My client is a Ubuntu 16.10 Linux machine.
>
> I am looking for a way to mount the encrypted samba share on the Linux
> client machine. I noticed that mount.cifs does not support encryption
> but smbclient does with an -e flag, however it seems to only be usable
> in a ftp-like interface. Is there any way to mount this share with
> smbclient or any other software that supports encrypted samba shares?
>
> Sending to Steve, who can explain why he *still*
> hasn't implemented this in cifsfs, depite it being
> designed to his spec. and included in the server since
> Samba 3.2.0....
>
> Bitter, Moi ? :-).
>
> Over to you Steve !
>
>
>
>
> --
> Thanks,
>
> Steve
>
>
>
>
>
> --
> Thanks
> Amit Kumar
> There are three ways to get something done:
>   (1) Do it yourself.
>   (2) Hire someone to do it for you.
>   (3) Forbid your kids to do it.
>
>


-- 
Thanks,

Steve