[SOLVED] Is SMB 2/3 built in by default in the 4.14.54 kernel that's available in current?

lukameen · 07-11-2018, 07:48 AM

Greetings,

I run slack 14.2 with the Huge kernel, but I need a kernel that supports SMB2/3. In kernel 4.4.132 the option for SMB2 is not set. In the 4.14.54 kernel there is an option for SMB311 that's also not set:
# CONFIG_CIFS_SMB311 is not set
There is no other SMB option in the config for 4.14.54. SMB311 is experimental, and I want to ask if SMB2/3 is built in to the kernel (4.14.54) by default, or does the option for SMB311 need to be compiled in to support SMB2/3.

Thanks!

kjhambrick · 07-11-2018, 08:18 AM

Thanks for making me look lukameen

I don't know the A to your Q but ...

I need to play with this on Slackware 14.2 on my BackUp Box for some Win10 Guests.

Looking at /usr/src/linux/fs/cifs/Kconfig for the latest Official Slackware64 14.2 Kernel ( 4.4.132 ), config CIFS_SMB311 is Documented as Experimental for 4.4.y too:

Code:

config CIFS_SMB311
        bool "SMB3.1.1 network file system support (Experimental)"
        depends on CIFS_SMB2 && INET

        help
          This enables experimental support for the newest, SMB3.1.1, dialect.
          This dialect includes improved security negotiation features.
          If unsure, say N

Looks like I need to 'turn on' CIFS_SMB2 and CIFS_SMB311 and then experiment ...

Thanks again.

-- kjh

phenixia2003 · 07-11-2018, 09:45 AM

Hello,

The SMB3.0 dialect is the default since this commit (in kernel 4.13 and above, but not backported to 4.4.x) and thus, the option CONFIG_CIFS_SMB2, which was previously needed to enable support for SMB version 2 (including SMB3), has been removed.

--
SeB

lukameen · 07-11-2018, 09:52 AM

Thanks. I'll upgrade to the 4.14.54 kernel in current. SMB1 was disabled at my workplace and I need SMB2/3 to mount windows shares.

Much appreciated.

kjhambrick · 07-11-2018, 02:27 PM

Thanks for the info phenixia2003 !

Building 4.4.140 where I set CONFIG_CIFS_SMB2=y

I was also prompted for CIFS_SMB311 ...

Code:

scripts/kconfig/conf  --oldconfig Kconfig
*
* Restart config...
*
*
* Network File Systems
*
Network File Systems (NETWORK_FILESYSTEMS) [Y/n/?] y
  NFS client support (NFS_FS) [Y/n/m/?] y
    NFS client support for NFS version 2 (NFS_V2) [Y/n/m/?] y
    NFS client support for NFS version 3 (NFS_V3) [Y/n/m/?] y
      NFS client support for the NFSv3 ACL protocol extension (NFS_V3_ACL) [N/y/?] n
    NFS client support for NFS version 4 (NFS_V4) [Y/n/m/?] y
    Provide swap over NFS support (NFS_SWAP) [Y/n/?] y
  NFS client support for NFSv4.1 (NFS_V4_1) [N/y/?] n
  Use the legacy NFS DNS resolver (NFS_USE_LEGACY_DNS) [N/y/?] n
  NFS server support (NFSD) [M/n/y/?] m
    NFS server support for NFS version 3 (NFSD_V3) [Y/?] y
      NFS server support for the NFSv3 ACL protocol extension (NFSD_V3_ACL) [N/y/?] n
    NFS server support for NFS version 4 (NFSD_V4) [Y/n/?] y
      NFSv4.1 server support for Parallel NFS (pNFS) (NFSD_PNFS) [Y/n/?] y
      Provide Security Label support for NFSv4 server (NFSD_V4_SECURITY_LABEL) [N/y/?] n
      NFS server manual fault injection (NFSD_FAULT_INJECTION) [N/y/?] n
  Secure RPC: Kerberos V mechanism (RPCSEC_GSS_KRB5) [M/n/y/?] m
  RPC: Enable dprintk debugging (SUNRPC_DEBUG) [N/y/?] n
  RPC-over-RDMA transport (SUNRPC_XPRT_RDMA) [M/n/?] m
  Ceph distributed file system (CEPH_FS) [M/n/y/?] m
    Enable Ceph client caching support (CEPH_FSCACHE) [Y/n/?] y
    Ceph POSIX Access Control Lists (CEPH_FS_POSIX_ACL) [Y/n/?] y
  CIFS support (advanced network filesystem, SMBFS successor) (CIFS) [M/n/y/?] m
    CIFS statistics (CIFS_STATS) [N/y/?] n
    Support legacy servers which use weaker LANMAN security (CIFS_WEAK_PW_HASH) [Y/n/?] y
    Kerberos/SPNEGO advanced session setup (CIFS_UPCALL) [N/y/?] n
    CIFS extended attributes (CIFS_XATTR) [N/y/?] n
    Enable CIFS debugging routines (CIFS_DEBUG) [Y/n/?] y
      Enable additional CIFS debugging routines (CIFS_DEBUG2) [N/y/?] n
    DFS feature support (CIFS_DFS_UPCALL) [Y/n/?] y
    SMB2 and SMB3 network file system support (CIFS_SMB2) [Y/n/?] y
      SMB3.1.1 network file system support (Experimental) (CIFS_SMB311) [N/y/?] (NEW) y

# ... and then it spewewd:

  Provide CIFS client caching support (CIFS_FSCACHE) [Y/n/?] y
  NCP file system support (to mount NetWare volumes) (NCP_FS) [M/n/y/?] m
    Packet signatures (NCPFS_PACKET_SIGNING) [Y/n/?] y
    Proprietary file locking (NCPFS_IOCTL_LOCKING) [Y/n/?] y
    Clear remove/delete inhibit when needed (NCPFS_STRONG) [Y/n/?] y
    Use NFS namespace if available (NCPFS_NFS_NS) [Y/n/?] y
    Use LONG (OS/2) namespace if available (NCPFS_OS2_NS) [Y/n/?] y
    Lowercase DOS filenames (NCPFS_SMALLDOS) [Y/n/?] y
    Use Native Language Support (NCPFS_NLS) [Y/n/?] y
    Enable symbolic links and execute flags (NCPFS_EXTRAS) [Y/n/?] y
  Coda file system support (advanced network fs) (CODA_FS) [M/n/y/?] m
  Andrew File System support (AFS) (AFS_FS) [M/n/y/?] m
    AFS dynamic debugging (AFS_DEBUG) [N/y/?] n
  Provide AFS client caching support (AFS_FSCACHE) [N/y/?] n
  Plan 9 Resource Sharing Support (9P2000) (9P_FS) [M/n/y/?] m
    Enable 9P client caching support (9P_FSCACHE) [N/y/?] n
    9P POSIX Access Control Lists (9P_FS_POSIX_ACL) [N/y/?] n
    9P Security Labels (9P_FS_SECURITY) [N/y/?] n

I'll try mounting a couple Win10 Shares with various vers=[23]* options this weekend.

Maybe Y'All helped me make my LAN a tad more secure !

Thanks !!

-- kjh

kjhambrick · 07-12-2018, 06:32 AM

Followup ...

I configured 4.4.140 to include SMB2 and SMB311 Experimental.

I compiled and installed the 4.4.140 HUGE and GENERIC Kernels

When I booted 4.4.140 GENERIC, it did not detect my synaptic mouse which made KDE navigation a tad tricky

From /var/log/syslog:

Code:

<<snip>>
Jul 12 03:04:18 kjhlt6 kernel: [   10.713976] psmouse serio2: synaptics: Unable to query device.
<<snip>>

I don't see anything in the 4.4.140 ChangeLog that is obviously related to Synaptics or psmouse or serio2 so I am not sure if it related to the SMB2 and SMB311 Configs or if it is a coincidence or ... ???

I rebuilt 4.4.140 without SMB2 and SMB311.

Will install and test again ... probably on Sunday or so ...

I'll report here when I have something to say

-- kjh