Disable SMBv1

How do I disable SMB v1 in smb.conf?

I have put these commands in the conf file’s [global] section. Are these sufficient?

    client min protocol = SMB2
    bind interfaces only = YES
    smb ports = 139

How do I verify SMBv1 is disabed?

On Tue, 11 Jul 2017 01:36:01 +0000, jimoe666 wrote:

> How do I verify SMBv1 is disabed?

Easiest and most effective way would be to try to connect using an SMBv1
client.

I understand that for some reason, Google recently decided to release one
for Android…

Jim


Jim Henderson
openSUSE Forums Administrator
Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

If you want to enforce it on the server side:

Under [Global], add;

min protocol = SMB2

Then you can test it by trying to mount it with -o vers=1.0 or similar, for example;

mount -vv -t cifs -o vers=1.0,username=yourusername //IP/RemoteMount LocalMount

Note, 1.0 and 2.0 will not work if the minimum is SMB2, you’ll need to mount it with vers=2.1 or 3.0

If the server does not support the SMB version you are requesting, mount command will report with;

mount error(95): Operation not supported

If you want to do it client side, then your suggestion is the correct one and you can use the -o vers=xxx to test it like in my example.