Re: [Samba] Encryption

2010-06-25 Thread Shirish Pargaonkar
On Fri, Jun 25, 2010 at 2:34 PM, Jeff Layton wrote: > On Fri, 25 Jun 2010 12:20:41 -0700 > Jeremy Allison wrote: > >> On Fri, Jun 25, 2010 at 06:54:08PM +, Dan Lenski wrote: >> > On Sun, 18 Apr 2010 10:29:38 -0400, simo wrote: >> > >> > > On Sun, 2010-04-18 at 10:05 -0400, Nico Kadel-Garcia w

Re: [Samba] Encryption

2010-06-25 Thread Jeff Layton
On Fri, 25 Jun 2010 12:20:41 -0700 Jeremy Allison wrote: > On Fri, Jun 25, 2010 at 06:54:08PM +, Dan Lenski wrote: > > On Sun, 18 Apr 2010 10:29:38 -0400, simo wrote: > > > > > On Sun, 2010-04-18 at 10:05 -0400, Nico Kadel-Garcia wrote: > > >> > > >> Reviewing the docs, this tool requires S

Re: [Samba] Encryption

2010-06-25 Thread Jeremy Allison
On Fri, Jun 25, 2010 at 06:54:08PM +, Dan Lenski wrote: > On Sun, 18 Apr 2010 10:29:38 -0400, simo wrote: > > > On Sun, 2010-04-18 at 10:05 -0400, Nico Kadel-Garcia wrote: > >> > >> Reviewing the docs, this tool requires Samba 3.2 or later on both the > >> client and server sides. I'm therefo

Re: [Samba] Encryption

2010-06-25 Thread Dan Lenski
On Sun, 18 Apr 2010 10:29:38 -0400, simo wrote: > On Sun, 2010-04-18 at 10:05 -0400, Nico Kadel-Garcia wrote: >> >> Reviewing the docs, this tool requires Samba 3.2 or later on both the >> client and server sides. I'm therefore assuming that it's not >> compatible with a contemporary Windows file

Re: [Samba] Encryption

2010-06-25 Thread Jeremy Allison
On Fri, Jun 25, 2010 at 06:44:17PM +, Dan Lenski wrote: > On Tue, 01 Dec 2009 08:23:01 -0800, Jeremy Allison wrote: > > > On Tue, Dec 01, 2009 at 10:01:57AM -0600, Cameron Laird wrote: > >> What are the prospects for "smb transport encryption"? Where can I > >> learn more? > > > > It's imple

Re: [Samba] Encryption

2010-06-25 Thread Dan Lenski
On Tue, 01 Dec 2009 08:23:01 -0800, Jeremy Allison wrote: > On Tue, Dec 01, 2009 at 10:01:57AM -0600, Cameron Laird wrote: >> What are the prospects for "smb transport encryption"? Where can I >> learn more? > > It's implemented via the UNIX extension mechanism between smbclient and > smbd for v

Re: [Samba] Encryption

2010-04-19 Thread Jeremy Allison
On Mon, Apr 19, 2010 at 02:49:52PM -0400, David Magda wrote: > On Mon, April 19, 2010 11:13, Jeremy Allison wrote: > > > This is RPC encryption, not SMB transport encryption. This can > > be negotiated on the traffic being carried within the SMB > > transport. > > Are OpenSSL's routines for all o

Re: [Samba] Encryption

2010-04-19 Thread David Magda
On Mon, April 19, 2010 11:13, Jeremy Allison wrote: > This is RPC encryption, not SMB transport encryption. This can > be negotiated on the traffic being carried within the SMB > transport. Are OpenSSL's routines for all of this? If you have hardware support for encryption (add-in card, CPU a la

Re: [Samba] Encryption

2010-04-19 Thread Jeremy Allison
On Mon, Apr 19, 2010 at 09:57:53AM -0400, Andrew Malton wrote: > Thanks for helpful comments and suggestions. > > In our situation we can't use smbclient -e because the data sources > are not Samba/Linux, they're running various versions of Windows. > But also, what we're doing is not file access

Re: [Samba] Encryption

2010-04-19 Thread Andrew Malton
Thanks for helpful comments and suggestions. In our situation we can't use smbclient -e because the data sources are not Samba/Linux, they're running various versions of Windows. But also, what we're doing is not file access but event log access. We aren't using CIFS but calling into ndr sub

Re: [Samba] Encryption

2010-04-19 Thread Nico Kadel-Garcia
On Sun, Apr 18, 2010 at 9:00 PM, Jeremy Allison wrote: > On Sun, Apr 18, 2010 at 09:20:54AM -0400, Nico Kadel-Garcia wrote: >> >> Samba is a very helpful implementation of CIFS, and I congratulate its >> authors. But CIFS was *not* built for data security. Encrypting such >> traffic would be an am

Re: [Samba] Encryption

2010-04-18 Thread Jeremy Allison
On Sun, Apr 18, 2010 at 09:20:54AM -0400, Nico Kadel-Garcia wrote: > > Samba is a very helpful implementation of CIFS, and I congratulate its > authors. But CIFS was *not* built for data security. Encrypting such > traffic would be an amazing performance hit on the server side. If you > need secur

Re: [Samba] Encryption

2010-04-18 Thread simo
On Sun, 2010-04-18 at 10:05 -0400, Nico Kadel-Garcia wrote: > > Reviewing the docs, this tool requires Samba 3.2 or later on both the > client and server sides. I'm therefore assuming that it's not > compatible with a contemporary Windows fileserver: can you confirm > this? Does anyone know if Net

Re: [Samba] Encryption

2010-04-18 Thread Nico Kadel-Garcia
On Sun, Apr 18, 2010 at 9:24 AM, Volker Lendecke wrote: > On Sun, Apr 18, 2010 at 09:20:54AM -0400, Nico Kadel-Garcia wrote: >> Samba is a very helpful implementation of CIFS, and I congratulate its >> authors. But CIFS was *not* built for data security. Encrypting such >> traffic would be an amaz

Re: [Samba] Encryption

2010-04-18 Thread Nico Kadel-Garcia
On Sun, Apr 18, 2010 at 9:24 AM, Volker Lendecke wrote: > On Sun, Apr 18, 2010 at 09:20:54AM -0400, Nico Kadel-Garcia wrote: >> Samba is a very helpful implementation of CIFS, and I congratulate its >> authors. But CIFS was *not* built for data security. Encrypting such >> traffic would be an amaz

Re: [Samba] Encryption

2010-04-18 Thread Volker Lendecke
On Sun, Apr 18, 2010 at 09:20:54AM -0400, Nico Kadel-Garcia wrote: > Samba is a very helpful implementation of CIFS, and I congratulate its > authors. But CIFS was *not* built for data security. Encrypting such > traffic would be an amazing performance hit on the server side. If you > need secure d

Re: [Samba] Encryption

2010-04-18 Thread Nico Kadel-Garcia
On Sat, Apr 17, 2010 at 7:32 PM, Rob Townley wrote: > On Sat, Apr 17, 2010 at 6:24 AM, Andrew Malton > wrote: >> I want to (continue to) use Samba code to obtain data needed by my Linux >> client.  This is currently done by calls into Samba's libraries. >>  Unfortunately the resulting rpc traffic

Re: [Samba] Encryption

2010-04-17 Thread Rob Townley
On Sat, Apr 17, 2010 at 6:24 AM, Andrew Malton wrote: > I want to (continue to) use Samba code to obtain data needed by my Linux > client.  This is currently done by calls into Samba's libraries. >  Unfortunately the resulting rpc traffic is unencrypted.  I think this has > to do with the configur

[Samba] Encryption

2010-04-17 Thread Andrew Malton
I want to (continue to) use Samba code to obtain data needed by my Linux client. This is currently done by calls into Samba's libraries. Unfortunately the resulting rpc traffic is unencrypted. I think this has to do with the configuration of encryption mechanisms on both sides, but perha

Re: [Samba] Encryption

2009-12-01 Thread Jeremy Allison
On Tue, Dec 01, 2009 at 10:01:57AM -0600, Cameron Laird wrote: > What are the prospects for "smb transport encryption"? Where can I learn > more? It's implemented via the UNIX extension mechanism between smbclient and smbd for versions of Samba 3.2.x and greater. Not yet implemented in the Linux

[Samba] Encryption

2009-12-01 Thread Cameron Laird
What are the prospects for "smb transport encryption"? Where can I learn more? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Encryption while accessing samba shares

2007-07-30 Thread Latrell Wang 王獻綱
Hi all: While accessing shares through CIFS, does the channel encrypted? If not, how can I encrypt the channel? Are the options in samba to achieve it? Thanks for all the replies, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists

Re: [Samba] Encryption

2002-11-05 Thread John H Terpstra
rd Huntley Jr" <[EMAIL PROTECTED]> > Cc: <[EMAIL PROTECTED]> > Sent: Monday, November 04, 2002 11:27 PM > Subject: Re: [Samba] Encryption > > > > On Tue, 5 Nov 2002, Howard Huntley Jr wrote: > > > > > I got my Samba compiled and I am seeing the Sun v

Re: [Samba] Encryption

2002-11-04 Thread Andrew Bartlett
On Tue, 2002-11-05 at 16:49, Howard Huntley Jr. wrote: > I compiled the source, My understand is that the encryption support has to > be compiled > into the binary. If not the "encrypt passwords = Yes" function in smb.conf. > is meaning less, Your understanding is incorrect. Samba's support for t

Re: [Samba] Encryption

2002-11-04 Thread Howard Huntley Jr.
d Huntley Jr" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, November 04, 2002 11:27 PM Subject: Re: [Samba] Encryption > On Tue, 5 Nov 2002, Howard Huntley Jr wrote: > > > I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I > > bas

Re: [Samba] Encryption

2002-11-04 Thread John H Terpstra
On Tue, 5 Nov 2002, Howard Huntley Jr wrote: > I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I > basically have an open samba system. I do not have encryption support > compiled into the binaries. I have looked high and low for the > instructions, Will any one tell me which c

[Samba] Encryption

2002-11-04 Thread Howard Huntley Jr
I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I basically have an open samba system. I do not have encryption support compiled into the binaries. I have looked high and low for the instructions, Will any one tell me which changes to make in the make file in order to get th

[Samba] Encryption

2002-11-04 Thread Howard Huntley Jr
I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I basically have an open samba system. I do not have encryption support compiled into the binaries. I have looked high and low for the instructions, Will any one tell me which changes to make in the make file in order to get th