Web lists-archives.com

Re: [Samba] Potential contribution: FUSE client w/ SMB3 encryption support




Hi David,

David Ramos via samba <samba@xxxxxxxxxxxxxxx> writes:
> My team is in search of a way to mount SMB3/CIFS shares from a Linux
> client with encryption enabled (and with reasonable
> performance). After some research, it appears that the kernel CIFS
> client (mount.cifs) lacks encryption support, while the Samba client
> library (libsmbclient) doesn't offer mount functionality.

Encryption support in cifs.ko was recently merged in Steve's for-next
branch, which means it will be merged in Linus tree during the v4.11
merge window. So you'll have to wait for the v4.11 release (around May
?) and/or backport it.

The patch itself adds the 'seal' mount option to enforce encryption. If
the share requires it, it's automatically enabled.

In terms of performance you can expect a 1/3 or the xfer speed when you
enable encryption on a SMB3 connexion. This could be improved if
aes-128-gcm is implemented.

-- 
Aurélien Aptel / SUSE Labs Samba Team
GPG: 1839 CB5F 9F5B FB9B AA97  8C99 03C8 A49B 521B D5D3
SUSE Linux GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany
GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba