[Samba] Disable SMB v1, & how to specify SMB2.1 instead of Vista-compat-SMB2?

L A Walsh samba at tlinx.org
Tue Jan 17 22:29:46 UTC 2017

lingpanda101 via samba wrote:
> Given this recent announcement 
> https://www.us-cert.gov/ncas/current-activity/2017/01/16/SMB-Security-Best-Practices 
Note: best practices != a security breach or flaw.

> How does one turn off and verify the SMB protocol setting? I'm a bit 
> confused by looking at the man page for smb.conf. I have the following 
> set which I believe to be the default settings.
>  samba-tool testparm -v | grep "max protocol"
>         client ipc max protocol = default
>         client max protocol = default
>         server max protocol = SMB3

    I was told I shouldn't go below SMB2.1 (for Win7SP1)

    How is that configured through smb.conf?  I was told SMB2 was for
Vista and doesn't have some features that 2.1 does have.

More information about the samba mailing list