[Samba] client min protocol = SMB2

[Gaiseric Vandal]

The client min and max protocols would apply if you were on a linux  
machine attempting to access a network share from a samba or real 
windows server.     If you have users using Linux PC's on their desks, 
then you might want to check the settings.   If all the users are using 
MS Windows PC's then this is not relevant.


Regardless of how the the client is set, as long as the servers enforce 
min protocol of SMB2 or higher then you should be OK.     SMB1 and older 
protocols are not considered secure.




On 7/22/19 11:22 AM, Edouard Guigné via samba wrote:
> Hello,
>
> Thank you !
>
> I add server min protocol = SMB2_02 to smb.cnf
>
> All clients are now using SMB2_10 as minimum protocol version
>
> May you indicate me the difference between "client min protocol" and 
> "server min protocol" ?
> "server min protocol" is to use on a domain member
> "client min protocol" is to use in which case ?
>
> Should I also set client min protocol = SMB2 to SMB2_02 ?
>
> EdG
>
> Le 22/07/2019 à 11:57, Rowland penny via samba a écrit :
>> On 22/07/2019 15:51, Edouard Guigné via samba wrote:
>>> I did not set max protocol to SMB2 in smb.cnf, I don't want to force 
>>> SMB2 selection if SMB3 can be used by a client.
>>>
>>> The machine is a Windows 7, so is SMB2 compliant.
>>>
>> If the Win 7 machine is connecting to a share on a Unix domain 
>> member, it is connecting to a 'server' not a 'client'
>>
>> So, set 'server min protocol = SMB2_02' as well
>>
>> Rowland
>>
>>
>>
>