| SMB(5) | File Formats and Configurations | SMB(5) |
smb —
configuration properties for illumos CIFS server
Behavior of the illumos CIFS server is defined by property values that are stored in the Service Management Facility, smf(7).
An authorized user can use the sharectl(8) command to set global values for these properties in SMF.
The following list describes the properties:
Specifies the site configured in DNS to look up Active Directory information. Sites provide a mechanism to partition or delegate administration and policy management, which are typically used in large or complex domains.
The value should not be set if you do not have a local Active Directory site. By default, no value is set.
Specifies the full path for the SMD autohome map file, smbautohome. The default path is /etc.
When set, allows the SMB server to bypass ACL
“traverse” checks. The default value is
‘true’, for Windows compatibility.
If this parameter is ‘false’, ACL
checks require that “traverse” (directory execute) is
granted on every directory above the directory the SMB client tries to
access. Windows shares are normally setup with the higher level
directories not specifically granting such access.
A value that controls whether to disconnect the share or proceed if the map command fails. The disposition property only has meaning when the map property has been set. Otherwise it will have no effect.
disposition = [ continue | terminate ]
Enables or disables dynamic DNS updates. A value of
‘true’ enables dynamic updates,
while a value of ‘false’ disables
dynamic updates. By default, the value is
‘false’.
Controls SMB3 Encryption. For requests on a particular share, the server's behavior is controlled by the stricter of this option and the per-share “encrypt” option.
When set to ‘disabled’,
the server will not ask clients to encrypt requests. Note that this
setting does not actually disable encryption, but leaves the decision
about whether to encrypt up to the client and/or the per-share options.
When set to ‘enabled’, the server
will ask clients to encrypt requests, but will not require that they do
so. Any message that can be encrypted will be encrypted. When set to
‘required’, the server will deny
access to or disconnect any client that does not support encryption or
fails to encrypt requests that they should.
In other words, the
‘enabled’ behavior is that any
message that can be encrypted
should be
encrypted, while the ‘required’
behavior is that any message that can be encrypted
must
be encrypted.
Specifies a list of enabled SMB 3.1.1 encryption ciphers. This
property is only used when encryption is
‘enabled’ (see
encrypt property) and negotiated SMB dialect is 3.1.1
or higher (see max_protocol property). Otherwise it is
ignored.
When the property is set, a list of comma separated ciphers
should be specified, or the value
‘all’ should be used instead to
enable all supported ciphers. When the property is empty, it is
equivalent to value ‘all’ —
all supported ciphers are enabled.
The list of ciphers should contain these values:
Enables IPv6 Internet protocol support within the CIFS
Service. Valid values are ‘true’
and ‘false’. The default value is
‘false’.
Specifies the number of seconds before an idle SMB connection
is dropped by the illumos CIFS server. If set to
‘0’, idle connections are not
dropped. Valid values are ‘0’ and
from ‘20’ seconds and above. The
default value is ‘0’.
The following describes the behavior at each level.
The value is a command to be executed when connecting to the share. The command can take the following arguments, which will be substituted when the command is exec'd as described below:
Specifies the maximum SMB protocol level that the SMB service
should allow clients to negotiate. The default value is
‘3.11’. Valid settings include:
‘1’,
‘2.1’,
‘3.0’,
‘3.02’,
‘3.11’.
Specifies the minimum SMB protocol level that the SMB service
should allow clients to negotiate. The default value is
‘1’. Valid settings include:
‘1’,
‘2.1’,
‘3.0’.
Specifies the maximum number of worker threads that will be
launched to process incoming CIFS requests. The SMB
max_mpx value, which indicates to a client the maximum
number of outstanding SMB requests that it may have pending on the
server, is derived from the max_workers value. To
ensure compatibility with older versions of Windows the lower 8-bits of
max_mpx must not be zero. If the lower byte of
max_workers is zero,
‘64’ is added to the value. Thus
the minimum value is ‘64’ and the
default value, which appears in
sharectl(8) as
‘1024’, is
‘1088’.
Specifies the NetBIOS scope identifier, which identifies logical NetBIOS networks that are on the same physical network. When you specify a NetBIOS scope identifier, the server filters the number of machines that are listed in the browser display to make it easier to find other hosts. The value is a text string that represents a domain name. By default, no value is set.
Controls whether “oplocks” may be granted by the SMB server. The term “oplock” is short for “opportunistic lock”, which is the legacy name for cache delegations in SMB. By default, oplocks are enabled. Note that if oplocks are disabled, file I/O performance may be severely reduced.
Specifies the preferred IP address for the domain controller. This property is sometimes used when there are multiple domain controllers to indicate which one is preferred. If the specified domain controller responds, it is chosen even if the other domain controllers are also available. By default, no value is set.
Disables anonymous access to IPC$, which
requires that the client be authenticated to get access to MSRPC
services through IPC$. A value of
‘true’ disables anonymous access
to IPC$, while a value of
‘false’ enables anonymous
access.
Enables the use of “short names” by SMB clients.
The default value is ‘false’
because modern SMB clients do not need short names, and using short
names has some performance cost while listing directories and opening or
renaming files.
Enables SMB signing. When signing is enabled but not required
it is possible for clients to connect regardless of whether or not the
client supports SMB signing. If a packet has been signed, the signature
will be verified. If a packet has not been signed it will be accepted
without signature verification. Valid values are
‘true’ and
‘false’. The default value is
‘true’.
When SMB signing is required, all packets must be signed or
they will be rejected, and clients that do not support signing will be
unable to connect to the server. The signing_required
setting is only taken into account when
signing_enabled is
‘true’. Valid values are
‘true’ and
‘false’. The default value is
‘true’.
Specifies an optional description for the system, which is a text string. This property value might appear in various places, such as Network Neighborhood or Network Places on Windows clients. By default, no value is set.
The traverse_mounts setting determines how
the SMB server presents sub-mounts underneath an SMB share. When
traverse_mounts is
‘true’ (the default), sub-mounts
are presented to SMB clients like any other subdirectory. When
traverse_mounts is
‘false’, sub-mounts are not shown
to SMB clients.
The value is a command to be executed when disconnecting the share. The command can take the same substitutions listed on the map property.
Specifies a comma-separated list of network interfaces that should not be registered with WINS. NetBIOS host announcements are made on excluded interfaces. By default, no value is set.
Specifies the IP address of the primary WINS server. By default, no value is set.
Specifies the IP address of the secondary WINS server. By default, no value is set.
Uncommitted
attributes(7), smf(7), sharectl(8), smbadm(8), smbd(8), smbstat(8)
| March 13, 2023 | OmniOS |