Print this page
12513 SMB 3.1.1 support for server


  74 
  75 
  76        encrypt
  77 
  78            Controls SMB3 Encryption. For requests on a particular share, the
  79            server's behavior is controlled by the stricter of this option and
  80            the per-share "encrypt" option.
  81 
  82            When set to disabled, the server will not ask clients to encrypt
  83            requests.  When set to enabled, the server will ask clients to
  84            encrypt requests, but will not require that they do so. Any message
  85            that can be encrypted will be encrypted.  When set to required, the
  86            server will deny access to or disconnect any client that does not
  87            support encryption or fails to encrypt requests that they should.
  88 
  89            In other words, the enabled behavior is that any message that CAN
  90            be encrypted SHOULD be encrypted, while the required behavior is
  91            that any message that CAN be encrypted MUST be encrypted.
  92 
  93 





















  94        ipv6_enable
  95 
  96            Enables IPv6 Internet protocol support within the CIFS Service.
  97            Valid values are true and false. The default value is false.
  98 
  99 
 100        keep_alive
 101 
 102            Specifies the number of seconds before an idle SMB connection is
 103            dropped by the Solaris CIFS server. If set to 0, idle connections
 104            are not dropped. Valid values are 0 and from 20 seconds and above.
 105            The default value is 0.
 106 
 107 
 108        lmauth_level
 109 
 110            Specifies the LAN Manager (LM) authentication level. The LM
 111            compatibility level controls the type of user authentication to use
 112            in workgroup mode or domain mode. The default value is 3.
 113 




  74 
  75 
  76        encrypt
  77 
  78            Controls SMB3 Encryption. For requests on a particular share, the
  79            server's behavior is controlled by the stricter of this option and
  80            the per-share "encrypt" option.
  81 
  82            When set to disabled, the server will not ask clients to encrypt
  83            requests.  When set to enabled, the server will ask clients to
  84            encrypt requests, but will not require that they do so. Any message
  85            that can be encrypted will be encrypted.  When set to required, the
  86            server will deny access to or disconnect any client that does not
  87            support encryption or fails to encrypt requests that they should.
  88 
  89            In other words, the enabled behavior is that any message that CAN
  90            be encrypted SHOULD be encrypted, while the required behavior is
  91            that any message that CAN be encrypted MUST be encrypted.
  92 
  93 
  94        encrypt_cipher
  95 
  96            Specifies SMB 3.1.1 Encryption Cipher. This property is only used
  97            when encryption is On (see encrypt property) and negotiated SMB
  98            dialect is 3.1.1 or higher (see max_protocol property). Otherwise
  99            it is ignored.  If the property is not set the default encryption
 100            algorith is AES-128-GCM.
 101 
 102            The property can be set to one of these values:
 103 
 104            aes128-ccm
 105                         AES-128-CCM. This is the only cipher used for SMB
 106                         3.0.2 dialect. It is deprecated by AES-128-GCM cipher.
 107 
 108 
 109            aes128-gcm
 110                         AES-128-GCM. This is default cipher for SMB 3.1.1
 111                         dialect.
 112 
 113 
 114 
 115        ipv6_enable
 116 
 117            Enables IPv6 Internet protocol support within the CIFS Service.
 118            Valid values are true and false. The default value is false.
 119 
 120 
 121        keep_alive
 122 
 123            Specifies the number of seconds before an idle SMB connection is
 124            dropped by the Solaris CIFS server. If set to 0, idle connections
 125            are not dropped. Valid values are 0 and from 20 seconds and above.
 126            The default value is 0.
 127 
 128 
 129        lmauth_level
 130 
 131            Specifies the LAN Manager (LM) authentication level. The LM
 132            compatibility level controls the type of user authentication to use
 133            in workgroup mode or domain mode. The default value is 3.
 134