From owner-freebsd-arch@freebsd.org Mon Nov 26 17:13:14 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 72E90113CEC4 for ; Mon, 26 Nov 2018 17:13:14 +0000 (UTC) (envelope-from gruasanmarcos002@gmail.com) Received: from mail-ot1-x341.google.com (mail-ot1-x341.google.com [IPv6:2607:f8b0:4864:20::341]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D20AC7D990 for ; Mon, 26 Nov 2018 17:13:13 +0000 (UTC) (envelope-from gruasanmarcos002@gmail.com) Received: by mail-ot1-x341.google.com with SMTP id 40so17308891oth.4 for ; Mon, 26 Nov 2018 09:13:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=YXJNvydv6/1+rKa21HwlU8II5SmqIcHs753Zu0FeDvM=; b=P8OSSr9aWLTTZci5eXZMGwbbCyfZtTTYur3Kk7j4Dy+STH0ZD0CvvwZetqoZ5Cg/GV 9EufC8YUCU1EfMMzsGsONnc4SwmRCIwakzcTY1V764PdnWGOnz22SwhXxGPeiQmPthMG D4zBm2+HuFHAk7zCt1b5667i8rrhnFwF0dsd3nFzOGWgtZSTljBhbgWqeUCfbH0YUmVz npKZHF6Tv9c/nsdzTl01CoOPYBnjwKxMOcNa7wqhI+gO8xLvasN6+xT421K2ZoT3k7aA pXVQB/NB8Ptb4xp4d++thANyBXVGzAcZxuldgWbZ3cYC+i87+DKoKwHmT9a9AtEXkdY4 mNLg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=YXJNvydv6/1+rKa21HwlU8II5SmqIcHs753Zu0FeDvM=; b=OATk1YbDUtVnJS/867LuZy1FX7/k9+llsNH5qcth4v6D6nwJ5oKmAFsiLR76H8xfHN u9e2lz7SJ06z/f2H/duH17OqHPvLO96PgUOcxlNQ7p5BHwsB+PVN3AwN+4oKOttlGWUV +hp5T0rhMFtnX450XPYeUGaqGKmmg1oajQ7Pne/GdBdFImJjPif1KIy/atN2ZJ5acC2U fUFtFJnjtaJ7W+HXGOV6TqXNGi95zNvEY603PI4/jru5C4Bthev/kxr1Rl2wgTQVOTxm PGrrYHDMAXCVu+d/bzuLRebLPutSVE1XG/IsE82JI/R6iASYHyX3/DjR3MS/nA86wlsK o44w== X-Gm-Message-State: AA+aEWbClGnl5qC5zffQTEi21S1yXjCsg1nGwjG7hYsSuYyF586M1woG g0kLNnzyFHte9c+ILsew+s0DpcyeDc2LCmOUvcJexK6sYGE= X-Google-Smtp-Source: AFSGD/UcYDjX+8v7iPL8yBMYTbF8Pwv0ozT4+s1mNsLXGLoY4Zc3LLvSe11bsdq1ecoa02w1w4EDvPqgvK8VTvcUXRU= X-Received: by 2002:a9d:5290:: with SMTP id f16mr14759689oth.68.1543252392900; Mon, 26 Nov 2018 09:13:12 -0800 (PST) MIME-Version: 1.0 Received: by 2002:a9d:d10:0:0:0:0:0 with HTTP; Mon, 26 Nov 2018 09:13:12 -0800 (PST) Received: by 2002:a9d:d10:0:0:0:0:0 with HTTP; Mon, 26 Nov 2018 09:13:12 -0800 (PST) From: Grua Sanmarco Date: Mon, 26 Nov 2018 09:13:12 -0800 Message-ID: Subject: To: freebsd-arch@freebsd.org X-Rspamd-Queue-Id: D20AC7D990 X-Spamd-Result: default: False [-2.80 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.99)[-0.987,0]; R_DKIM_ALLOW(-0.20)[gmail.com]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arch@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-0.98)[-0.983,0]; RCVD_COUNT_THREE(0.00)[4]; IP_SCORE(-0.42)[ip: (1.17), ipnet: 2607:f8b0::/32(-1.80), asn: 15169(-1.38), country: US(-0.09)]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[1.4.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.40)[-0.401,0]; FROM_EQ_ENVFROM(0.00)[]; EMPTY_SUBJECT(1.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_TLS_LAST(0.00)[] X-Rspamd-Server: mx1.freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 17:13:14 -0000 From owner-freebsd-arch@freebsd.org Mon Nov 26 17:19:32 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E692D113D1A1 for ; Mon, 26 Nov 2018 17:19:31 +0000 (UTC) (envelope-from gerard@seibercom.net) Received: from mail-yw1-xc32.google.com (mail-yw1-xc32.google.com [IPv6:2607:f8b0:4864:20::c32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DBE1E7DC6C for ; Mon, 26 Nov 2018 17:19:30 +0000 (UTC) (envelope-from gerard@seibercom.net) Received: by mail-yw1-xc32.google.com with SMTP id q11so7885225ywa.0 for ; Mon, 26 Nov 2018 09:19:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seibercom.net; s=google; h=date:from:to:subject:message-id:reply-to:organization:mime-version :content-transfer-encoding; bh=Qjdp6uJGDnjypRPvxtsM60P8fQLSGu3xvu2pz3c5xO4=; b=nfZ5mJQvkkSGMmYrKCtAfuoPCH8Y4E/6kTjWW4BYKf7vuR9P0zhvunoxD3buwhE4C1 1F1sug/ugOl7zu5R/DsaV/fAFK3P6GA0iO1Mjs2/8kszitOYkfMIjZSFwfbgFiILEEsg FBED3kAV1jP4Y/W3s0c5SW0pJ/6rZu8emIynA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:reply-to :organization:mime-version:content-transfer-encoding; bh=Qjdp6uJGDnjypRPvxtsM60P8fQLSGu3xvu2pz3c5xO4=; b=RwFZ5sQvh0kcrr1zdZlaeWV30dWaaYvrepMX3ehzIPhL8Omaa6taTwAloEMu+WcKoF N5zbYwv7Xo+u4OZO7fLGwJYOrcjxjL0Z+hXOJpbOFXJL7ctqkO9JhO26u+nMMYOMhNLc mx7xx3ZxZ7T0T/cABu2tlfRautFBOwZHGzKvb+KOLaAwnb1mrcP8vOtXWXoX9klc4+bx StSZeQc8W804ZO9M574KTdD8ldeOI+GNYBf25twOXfcWKcJu7jLbyP/RTRK/wI4yEUE0 vpBYt/k6Mcm/Tm+eIsLjo4LE1Mwzc1q1nvWkGfL2yOY53eYjybk3DVfBu4h0IjppHBoi eS0g== X-Gm-Message-State: AGRZ1gJsbbd9XOpswGmI9//sDBRQlE9FYjqU6rrijSTtB2Y3xs1W+p4n lNBB4bQAoQJPjOzT64jy8ARC6B2ayz8= X-Google-Smtp-Source: AJdET5eGOB5o4brqxshxU1aKpXeAXp2pyIDyL9eR4pNB693N6PtUsqzUze/vaDn/8f7L+ib5+K8mDg== X-Received: by 2002:a81:34d3:: with SMTP id b202mr29708119ywa.241.1543252769714; Mon, 26 Nov 2018 09:19:29 -0800 (PST) Received: from scorpio.seibercom.net (cpe-174-109-225-250.nc.res.rr.com. [174.109.225.250]) by smtp.gmail.com with ESMTPSA id z128sm201840ywb.96.2018.11.26.09.19.28 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 26 Nov 2018 09:19:28 -0800 (PST) Received: from localhost (cpe-174-109-225-250.nc.res.rr.com [174.109.225.250]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: gerard@seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 433YYr0rD5z3Btn for ; Mon, 26 Nov 2018 12:19:28 -0500 (EST) Date: Mon, 26 Nov 2018 12:19:26 -0500 From: Gerard Seibert To: freebsd-arch@freebsd.org Subject: Removal or updating of "mount_smbfs" from FreeBSD operating system Message-ID: <20181126121926.00007626@seibercom.net> Reply-To: Gerard Seibert Organization: Seibercom NET X-Mailer: Claws Mail 3.17.1 (GTK+ 2.24.32; x86_64-w64-mingw32) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: DBE1E7DC6C X-Spamd-Result: default: False [-4.04 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[gerard@seibercom.net]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; TO_DN_NONE(0.00)[]; HAS_ORG_HEADER(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[seibercom.net:+]; MX_GOOD(-0.01)[alt1.aspmx.l.google.com,alt4.aspmx.l.google.com,alt3.aspmx.l.google.com,alt2.aspmx.l.google.com,aspmx.l.google.com]; NEURAL_HAM_SHORT(-0.88)[-0.879,0]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(-0.65)[ipnet: 2607:f8b0::/32(-1.80), asn: 15169(-1.38), country: US(-0.09)]; RCVD_TLS_LAST(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[250.225.109.174.zen.spamhaus.org : 127.0.0.10]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[seibercom.net]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arch@freebsd.org]; DMARC_NA(0.00)[seibercom.net]; RCPT_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[2.3.c.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 17:19:32 -0000 TO WHOM IT MAY CONCERN The “SMBv1” protocol is a security hazard and was depreciated by Microsoft in 2014. There is virtually no use for it anymore. The “mount_smbfs” utility in FreeBSD only uses that protocol, which results in making it useless with newer versions of Microsoft’s operating systems, as well as other OS’s that have depreciated the use of SMBv1. I would like to suggest that FreeBSD do one of the following: 1) Remove “mount_smbfs” from FreeBSD. This would probably be in versions 12.1 or 13. It is perhaps too late to get into FreeBSD 12. 2) Update “mount_smbfs” so that it is compatible with versions SMBv3 and greater. While "SMBv2" is not dead, it is definitely comatose. This would be a better idea if someone had the time to do it. Thank you for taking the time to read this suggestion. -- Gerard E. Seibert From owner-freebsd-arch@freebsd.org Mon Nov 26 18:04:07 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B8113113ECE4 for ; Mon, 26 Nov 2018 18:04:07 +0000 (UTC) (envelope-from SRS0=Kso7=OF=quip.cz=000.fbsd@elsa.codelab.cz) Received: from elsa.codelab.cz (elsa.codelab.cz [94.124.105.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 046C0804B9 for ; Mon, 26 Nov 2018 18:04:07 +0000 (UTC) (envelope-from SRS0=Kso7=OF=quip.cz=000.fbsd@elsa.codelab.cz) Received: from elsa.codelab.cz (localhost [127.0.0.1]) by elsa.codelab.cz (Postfix) with ESMTP id 61A6128411; Mon, 26 Nov 2018 18:57:33 +0100 (CET) Received: from illbsd.quip.test (ip-86-49-16-209.net.upcbroadband.cz [86.49.16.209]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by elsa.codelab.cz (Postfix) with ESMTPSA id 85B5C28417; Mon, 26 Nov 2018 18:57:32 +0100 (CET) Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system To: Gerard Seibert , freebsd-arch@freebsd.org References: <20181126121926.00007626@seibercom.net> From: Miroslav Lachman <000.fbsd@quip.cz> Message-ID: <992c395a-d29e-3f71-9750-b0cbdf2761f4@quip.cz> Date: Mon, 26 Nov 2018 18:57:32 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.3 MIME-Version: 1.0 In-Reply-To: <20181126121926.00007626@seibercom.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 046C0804B9 X-Spamd-Result: default: False [3.66 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FORGED_MUA_SEAMONKEY_MSGID_UNKNOWN(2.50)[]; NEURAL_HAM_MEDIUM(-0.57)[-0.571,0]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; NEURAL_SPAM_SHORT(0.42)[0.419,0]; IP_SCORE(0.00)[country: CZ(0.02)]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[quip.cz]; AUTH_NA(1.00)[]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: elsa.codelab.cz]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[4.105.124.94.list.dnswl.org : 127.0.10.0]; NEURAL_SPAM_LONG(0.12)[0.119,0]; R_SPF_NA(0.00)[]; FORGED_SENDER(0.30)[000.fbsd@quip.cz,SRS0=Kso7=OF=quip.cz=000.fbsd@elsa.codelab.cz]; RECEIVED_SPAMHAUS_PBL(0.00)[209.16.49.86.zen.spamhaus.org : 127.0.0.11]; R_DKIM_NA(0.00)[]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:42000, ipnet:94.124.104.0/21, country:CZ]; FROM_NEQ_ENVFROM(0.00)[000.fbsd@quip.cz,SRS0=Kso7=OF=quip.cz=000.fbsd@elsa.codelab.cz]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 18:04:07 -0000 Gerard Seibert wrote on 2018/11/26 18:19: > TO WHOM IT MAY CONCERN > > The “SMBv1” protocol is a security hazard and was depreciated by Microsoft in > 2014. There is virtually no use for it anymore. > > The “mount_smbfs” utility in FreeBSD only uses that protocol, which results > in making it useless with newer versions of Microsoft’s operating systems, as > well as other OS’s that have depreciated the use of SMBv1. > > I would like to suggest that FreeBSD do one of the following: > > 1) Remove “mount_smbfs” from FreeBSD. This would probably be in versions 12.1 > or 13. It is perhaps too late to get into FreeBSD 12. > > 2) Update “mount_smbfs” so that it is compatible with versions SMBv3 and > greater. While "SMBv2" is not dead, it is definitely comatose. This would be a > better idea if someone had the time to do it. > > Thank you for taking the time to read this suggestion. Is there any working (production ready) alternative in ports tree? We are in heterogenous environment and some of our servers have more than 10 SMB shares mounted by mount_smbfs. Kind regards Miroslav Lachman From owner-freebsd-arch@freebsd.org Mon Nov 26 18:10:11 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BCF5A113EFB1 for ; Mon, 26 Nov 2018 18:10:11 +0000 (UTC) (envelope-from yuripv@yuripv.net) Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1926E8075C for ; Mon, 26 Nov 2018 18:10:10 +0000 (UTC) (envelope-from yuripv@yuripv.net) Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 7C3B222A81; Mon, 26 Nov 2018 13:10:10 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute5.internal (MEProxy); Mon, 26 Nov 2018 13:10:10 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yuripv.net; h= subject:to:references:from:message-id:date:mime-version :in-reply-to:content-type; s=fm3; bh=DW8/vxpAUBHpHku2lsVZneTl+Ed bShoegDiC7yru8os=; b=hKIHrFZBEyk1EhthSd2ePPgF1nTAYZiwEBHvJ13pNKA qTd52EMaRTehgX3R4J8QR2Fz230LrdPUxp2Y0Fhme5cxcb4ePXhaErsWxqxYJxNS G3rGzfckPbAtLmdxI+gsCIeNrRXSo3B4gV+4Ek/xRr601mAy02iIiENYtP/Fesqe jW223hoxeKXg9r/AJz11X/42SOhbePcXgyfzFChL49GY72LNbOKuJf03grSYm7PX v5eL0h0gin42GrrwR4S0TQFfMJfTIJ0rN11sYK+x1AERuyyAIXKjHLyb6Hq7JbGX aEaYdcHvv1WVU6i346E25Slab0O4matvejn8M02Cnzw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=DW8/vx pAUBHpHku2lsVZneTl+EdbShoegDiC7yru8os=; b=HdzfeMKAtAq16gbms8Hrtv /CwOHjrIqPtUsqCgHkKEaRRANO5gSYmct22UeUO8b/fgPGjy6jh5VodI+BQEp19O r2skstaGkPUjH+lLHOQHaq/mzTzPGmJsWSvOZDAEnZ2PC1MqluKsvzgdfahEksDP JCP0hjEmtKbSkdOsjaEXQdGJ5ZWyguQFYUnKVrrsCYrsN9whoHfYnYIAIDep3Mjm wqPDCJ3s9bbAbkHMD0LZDYIT5P3OHo0jVOVdP6WkoJBJwPWOS9E6cXCAmRyWyUYc KKcxgffXPiNhyenl0Ze83+S9yJZs9e81LIpjwH1JHdR1p+Z6RBhiycGTtNVDbdLg == X-ME-Sender: X-ME-Proxy: Received: from [192.168.1.2] (unknown [62.183.125.179]) by mail.messagingengine.com (Postfix) with ESMTPA id 1A3C9E49AD; Mon, 26 Nov 2018 13:10:07 -0500 (EST) Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system To: Gerard Seibert , freebsd-arch@freebsd.org References: <20181126121926.00007626@seibercom.net> From: Yuri Pankov Openpgp: preference=signencrypt Autocrypt: addr=yuripv@yuripv.net; keydata= xsBNBFu8u6IBCADB11gP0QwnorrHjqAtKLHKHNHskhy0s7jqJKfx0YqXgVBKGLJ9/mjLAz0F CBNvemHSDDTs0mEZ9cBKKi6cmsav6+UQgr//yai6hvXLBJqKchSFO4MhmdvBtsGFq1yKz5Zi uhjmimKyIpgBgvMdbgGbGq6cnSB2uEPmZuJr419SVRODOkXukU+F5WHgaHzDdHAIu1asCt2B +6msxqIqlFWcXyZyTGicTGGvC/PFIsVRUtD1dIJANTC876g7DTb7LZXWiWwJpSJ4GKMXMHVX Ct9BoQ4i3nhKbOxb6Io1wsy+NFyWsTJ9KYrxKKPJP3oG8BWb/cqlFqnE4eNSsiq2q7krABEB AAHNH1l1cmkgUGFua292IDx5dXJpcHZAeXVyaXB2Lm5ldD7CwJcEEwEIAEECGwMFCQWjmoAF CwkIBwMFFQoJCAsFFgMCAQACHgECF4AWIQT4arc+w94tPi0v/3CTi+B/sSrhbAUCW708wAIZ AQAKCRCTi+B/sSrhbPxBB/961alcU091O+yKT5/oReHVc/PX0Tz4sW3V44AcgLfYlrZavCro EFz90qmCrl0xqEwuAKcC4bjmL8SjPWAhSN6IH9nxdw+HeZnAPiHm/q679Bu47+nHBl3qD/9p +t1PkKeKZfaWToFMt1nq06ytSu6VLMCwLdlDNe6DReX0ex/afEqKsuaIZSKL4UYjRwklp8PU Uf98QkrfapyHB67hQMzfI4tPeJaYyv0cTgfq3kUWJx1V6Xi0b6Zxj4ZrB2TXvaMO5g7yhU9E E3WWAvoe4FgB3a7dHe8atnHhq5+Cuvm6+LD4Jh7jvMAE5UMN+xxQpnGpNghHjaCy4vXrLRBZ nhRYzsBNBFu8u6IBCADKih3Q933rDNj4ZA8FhBQ2RlmBgvwOLcDPIL3h0V7h38y3+HisgFSc XACDsdrTlYZ1bRXkD9FHENynBcv0l/3uGJDk8jaGIDE0TP8OQBRp+IaU9/BHnAqrKxTJGIol Dahy2m+yx2yhdc6B4ujWMDqCF1rWOD+ymOWw+VLllOkrHcZa5PJtX9UOGbApZl8ZTM8El4CA NN8F1bg9MWzUi+8LYoGWGc+BwsFS1OUB1c4SPgMu5fD4Wfsr9yRl06fdpEA2YT7B/j5/5RSC 0sE2Zs/tmJ/JRflHJ12ycj59ma2xQMfEJF40hZDpMFQmZvbVqgEg3ocQcltjbxlIKZ/mjC4z ABEBAAHCwHwEGAEKACYWIQT4arc+w94tPi0v/3CTi+B/sSrhbAUCW7y7ogIbDAUJBaOagAAK CRCTi+B/sSrhbIDcCACqAZMcoxUBLZa40a5b24j5i1jplvCYYb3h+Q5lt5+BFJ87kCb4dJuU D3kh2i29BrxWQWa9WNue9ozxeYkbkfXubQYXexVolRsnh64OdGsE8KvorBFBB3zdK/GRt2Jy +jsnTfUWuQllbzMP0MfhCDMk1Mo8WvDH2/cOEP/yLKf20a+cd6nLs7bidjmGXo9pyuBKAtV6 Kv+VRu54AL+A/UBYu/eB3Dtvzcnut+1Zq6KaP++kUwPwINLIk04OBDwN0zRNTiqMAFYYyz2v ZHBB6E1th/l//ZC5b9Dk0ZpFI1bYdL9ymnrZe1MqbGPnDCToQxu00T/pZCm6Z92YrZQYuNwl Message-ID: <70b84814-89a8-fdef-7092-1cb4a46785e1@yuripv.net> Date: Mon, 26 Nov 2018 21:09:57 +0300 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.3.1 MIME-Version: 1.0 In-Reply-To: <20181126121926.00007626@seibercom.net> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="OxsAe2UgGdIHRzPHmWIdYxHjJDWmf6UIB" X-Rspamd-Queue-Id: 1926E8075C X-Spamd-Result: default: False [-9.32 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[yuripv.net,messagingengine.com]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:66.111.4.28]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; HAS_ATTACHMENT(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain]; DMARC_NA(0.00)[yuripv.net]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: in2-smtp.messagingengine.com]; DKIM_TRACE(0.00)[yuripv.net:+,messagingengine.com:+]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.99)[-0.989,0]; SIGNED_PGP(-2.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[28.4.111.66.list.dnswl.org : 127.0.5.1]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.4.0/24, country:US]; MID_RHS_MATCH_FROM(0.00)[]; IP_SCORE(-3.62)[ip: (-9.46), ipnet: 66.111.4.0/24(-4.67), asn: 11403(-3.88), country: US(-0.09)] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 18:10:12 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --OxsAe2UgGdIHRzPHmWIdYxHjJDWmf6UIB Content-Type: multipart/mixed; boundary="IWk54rwCxnW4wHAFkbETbUapDxnamcowq"; protected-headers="v1" From: Yuri Pankov To: Gerard Seibert , freebsd-arch@freebsd.org Message-ID: <70b84814-89a8-fdef-7092-1cb4a46785e1@yuripv.net> Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system References: <20181126121926.00007626@seibercom.net> In-Reply-To: <20181126121926.00007626@seibercom.net> --IWk54rwCxnW4wHAFkbETbUapDxnamcowq Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Gerard Seibert wrote: > TO WHOM IT MAY CONCERN >=20 > The =E2=80=9CSMBv1=E2=80=9D protocol is a security hazard and was depre= ciated by Microsoft in > 2014. There is virtually no use for it anymore. >=20 > The =E2=80=9Cmount_smbfs=E2=80=9D utility in FreeBSD only uses that pro= tocol, which results > in making it useless with newer versions of Microsoft=E2=80=99s operati= ng systems, as > well as other OS=E2=80=99s that have depreciated the use of SMBv1. >=20 > I would like to suggest that FreeBSD do one of the following: >=20 > 1) Remove =E2=80=9Cmount_smbfs=E2=80=9D from FreeBSD. This would probab= ly be in versions 12.1 > or 13. It is perhaps too late to get into FreeBSD 12. I don't think this is reasonable, more so in a hurry, as this is a client, and doesn't impose any security issues. > 2) Update =E2=80=9Cmount_smbfs=E2=80=9D so that it is compatible with v= ersions SMBv3 and > greater. While "SMBv2" is not dead, it is definitely comatose. This wou= ld be a > better idea if someone had the time to do it. There's an entry in https://wiki.freebsd.org/DevSummit/201810: ---------------------------------------------------------------------- updated mount SMBFS smbv3 support (iXsystems) ---------------------------------------------------------------------- I wonder if we could get a bit more information on this -- is this just a plan, or is it being actively worked on/ready for integration? --IWk54rwCxnW4wHAFkbETbUapDxnamcowq-- --OxsAe2UgGdIHRzPHmWIdYxHjJDWmf6UIB Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE+Gq3PsPeLT4tL/9wk4vgf7Eq4WwFAlv8Nv0ACgkQk4vgf7Eq 4WxvdAf+JFYubI6vGIeZ9LreW7CGlYolKtwZkkIT56854+kaNxTVidx9hDfefeRE fLXwmsrRUdh/V2SW5peESwaAVb48GmyX7eD3Hnq9Y1Pp0XomW7uhrHLHOMRfHWYi 0kwi8qW+G4a541JypK0nW5UpWeMPNkeTNwiDkqznM35GG9s6yLqAtJ3h9YcTXnpK jVYkfeUQ6itdbyaehFheF6UtR3ZxcnHNF0ruAPe1LTvdL+QpSu3Vf9V1B+XARtUj ZMwgMYhQ6Ichh08ZjA2nMSlkr37ug/tFyx9Aq9cGBzEoexvm/qY1njcV3v6k0FFw xYyRLJZpgf5v/36Mv6NQbot8ZHp4cg== =KVCN -----END PGP SIGNATURE----- --OxsAe2UgGdIHRzPHmWIdYxHjJDWmf6UIB-- From owner-freebsd-arch@freebsd.org Mon Nov 26 18:10:49 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D3F25113F126 for ; Mon, 26 Nov 2018 18:10:48 +0000 (UTC) (envelope-from bapt@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5ED388082B; Mon, 26 Nov 2018 18:10:48 +0000 (UTC) (envelope-from bapt@FreeBSD.org) Received: from ivaldir.etoilebsd.net (etoilebsd.net [178.32.217.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: bapt) by smtp.freebsd.org (Postfix) with ESMTPSA id 25ED812416; Mon, 26 Nov 2018 18:10:48 +0000 (UTC) (envelope-from bapt@FreeBSD.org) Received: by ivaldir.etoilebsd.net (Postfix, from userid 1001) id F07C933848; Mon, 26 Nov 2018 19:10:46 +0100 (CET) Date: Mon, 26 Nov 2018 19:10:46 +0100 From: Baptiste Daroussin To: Miroslav Lachman <000.fbsd@quip.cz> Cc: Gerard Seibert , freebsd-arch@freebsd.org Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system Message-ID: <20181126181046.6ofproezdd6hgvdl@ivaldir.net> References: <20181126121926.00007626@seibercom.net> <992c395a-d29e-3f71-9750-b0cbdf2761f4@quip.cz> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="3nsh2bh75xzawlho" Content-Disposition: inline In-Reply-To: <992c395a-d29e-3f71-9750-b0cbdf2761f4@quip.cz> User-Agent: NeoMutt/20180716 X-Rspamd-Queue-Id: 5ED388082B X-Spamd-Result: default: False [1.51 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_SPAM_LONG(0.73)[0.733,0]; NEURAL_SPAM_MEDIUM(0.48)[0.475,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US]; NEURAL_SPAM_SHORT(0.31)[0.306,0] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 18:10:49 -0000 --3nsh2bh75xzawlho Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Nov 26, 2018 at 06:57:32PM +0100, Miroslav Lachman wrote: > Gerard Seibert wrote on 2018/11/26 18:19: > > TO WHOM IT MAY CONCERN > >=20 > > The =E2=80=9CSMBv1=E2=80=9D protocol is a security hazard and was depre= ciated by Microsoft in > > 2014. There is virtually no use for it anymore. > >=20 > > The =E2=80=9Cmount_smbfs=E2=80=9D utility in FreeBSD only uses that pro= tocol, which results > > in making it useless with newer versions of Microsoft=E2=80=99s operati= ng systems, as > > well as other OS=E2=80=99s that have depreciated the use of SMBv1. > >=20 > > I would like to suggest that FreeBSD do one of the following: > >=20 > > 1) Remove =E2=80=9Cmount_smbfs=E2=80=9D from FreeBSD. This would probab= ly be in versions 12.1 > > or 13. It is perhaps too late to get into FreeBSD 12. > >=20 > > 2) Update =E2=80=9Cmount_smbfs=E2=80=9D so that it is compatible with v= ersions SMBv3 and > > greater. While "SMBv2" is not dead, it is definitely comatose. This wou= ld be a > > better idea if someone had the time to do it. > >=20 > > Thank you for taking the time to read this suggestion. >=20 > Is there any working (production ready) alternative in ports tree? > We are in heterogenous environment and some of our servers have more than= 10 > SMB shares mounted by mount_smbfs. >=20 There are some fuse based alternative yes: fusefs-smbnetfs Best regards, Bapt --3nsh2bh75xzawlho Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEgOTj3suS2urGXVU3Y4mL3PG3PloFAlv8NyQACgkQY4mL3PG3 PlpuBQ//cEo1MP+HnaV9ijFufp8a/rWMczMTRUv3t0xRXlYwMGVFJ0ZUBSkW0/4a yHPC5QGeotnj3Xzr2xNr1IjBfPWRt7GBu9XEogwWRWo3aRYkSLWlaZ1Vk5iOkC5P f8AXiAVL6XEVWIDSzAwmy8HhqpURe1CijB7bumLVbuca/2K3A3rOB0a0DVfXXQX/ ItSQ3+mB+6d1RMwkVevhmdgYWlZt0nc38yfmmMEA8RuU5XLIWvL12zaxZWsvMMCf 0v5uJws6UZdLHuk62kG67E1yTKaiXwT2NO1NU6ji/aIyQyOkkP6zv35PX5JCHdQ6 gX8DobgLZwYmvaPGBfuq8CfijR9/dXFCxmyoHbqtzElh2Tu+SPRm3tglY/gT0nMx jXreZWzwSL3tT5LoGx7/l88Y7exfxpEMKNeW3xKX23J+HTgMvYLMeTuGN3AEnrCc UfVmZ5tyAggbHfQQ7qTarPeCBugzqXZLO9tjDpeFPWgMIpBwv5YTGzG2vgae2IYJ MUYrR3OetUf6M+53ectLT8rt+uAmrpucKcxCf4LWo2iu1AM+v+jyBdM97f+9+fsY tskXXG1EiWSEOXyWwIJMdgu6sJCTDKp8KVBjVQtUbsL5uR3iUy1hJxZ/4B7G8OGu EnVzrW6nMn+MSixu83ewkeWxB1jeu9LMBUhxaftbH6jTkLZn3X8= =kwkk -----END PGP SIGNATURE----- --3nsh2bh75xzawlho-- From owner-freebsd-arch@freebsd.org Mon Nov 26 18:59:21 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 79F121140ABE for ; Mon, 26 Nov 2018 18:59:21 +0000 (UTC) (envelope-from kris@ixsystems.com) Received: from mail-yb1-xb2d.google.com (mail-yb1-xb2d.google.com [IPv6:2607:f8b0:4864:20::b2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id AEA6B830D8 for ; Mon, 26 Nov 2018 18:59:20 +0000 (UTC) (envelope-from kris@ixsystems.com) Received: by mail-yb1-xb2d.google.com with SMTP id d18-v6so7944873yba.4 for ; Mon, 26 Nov 2018 10:59:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ixsystems-com.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=I/fMQNcBBCaOjZLNZwI8wtyTgVTpwfTrkUNvmlSnaFo=; b=0rwZKUng5nUE5SsXRTXUmi/bEhINTFhViRQDnz7naMT9wSwijC7C0Fm3HJZTGcK360 GrvSrltKX89aMD4coeOQ7dkLVzFpdAk2dEbJhI7vX5uGaXMMBx1f/PvEvL8hOrVfxJU9 mHWpss4zoP08yeqLbF2PW/Nxb0t7whNP/ydra6fFodFNzObdJh5S9MNkFP5X3Lw9rKGR yAaaSQywthMGL9p9IN+7Y1FLFuNKgTJEWzSoJHpdoH1PeGT6iOpqrYwyhrf46vVN/2Gi U3rUEjUKgZFN2jpTmS3BZ1CL2nATFPfU2KvWkBF7whwfzScs8JqukNb13nQ96JvZMtxV GpOA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:openpgp:autocrypt :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding:content-language; bh=I/fMQNcBBCaOjZLNZwI8wtyTgVTpwfTrkUNvmlSnaFo=; b=F/+vRLEjH94N36bBoZNXrfeiYzUXtXwn+4wAe7vVYHChbCr3+hc6QVL7EPnl6TtCjl RLXWTEJsv00nYe8qwP8zqt/JWE7b0/e5jfFnXHe3M24BIprfaJHi3zekfdcut4K8Q4Wt mejJdeYHdYEimWW+5eS6u00a8jgf7iP9j/Mwxnpja09DoqLRRVQsHee4xQzZDcfdjxqr N/KLKs7BHixfEZnNidBiFlsiwoBj7fTCWNFBcgRHXF7us415EwiyBMxshcAVYa7FkiXy saBeQ0YYqQeVmCGFJFiTHJS86ltZbNFif8X762we4vdCCwl5SmKIS2DdnsIvI/YlUaWs iB9A== X-Gm-Message-State: AA+aEWY2dvZR4DPzFRttq1QTgrj6rm8yToB8YKjl+92te8hvaz8F3Ef1 RP+FNDpo+7cLhFU6e2rb1tRbQpMeuKeet0IKanq2UQPjwP6acS3AEE/qXW+jawKgiRUu+3ON7Ot d7UpFFsHSCx5mDeXAPLZnsH2ZTSpVPiU0871G3rEzyGPnJeOOeXyQD7gJtppEhpSCI5w= X-Google-Smtp-Source: AJdET5eBoSyKK74sexfsQ9DVr0SpTAjN5iX5+vmnzI+K3UKlz9YyrAduUdlGaMG8wHbkh7koRolIYA== X-Received: by 2002:a25:718b:: with SMTP id m133-v6mr29026895ybc.79.1543258759581; Mon, 26 Nov 2018 10:59:19 -0800 (PST) Received: from [10.231.5.154] ([12.189.233.129]) by smtp.gmail.com with ESMTPSA id n66-v6sm291466ywe.37.2018.11.26.10.59.18 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 26 Nov 2018 10:59:18 -0800 (PST) Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system To: freebsd-arch@freebsd.org References: <20181126121926.00007626@seibercom.net> <70b84814-89a8-fdef-7092-1cb4a46785e1@yuripv.net> From: Kris Moore Openpgp: preference=signencrypt Autocrypt: addr=kris@ixsystems.com; prefer-encrypt=mutual; keydata= xsFNBFnp+coBEADCFx6BWLwcoFWGz31gP571fwGraNjKwPOoUcL2Xjeyz7Dv5n6v8VDpQIqa jhchZcSEcwbterC7EblpcVGJSUP4ViwZFGFGlmxsKd5YfcJ+8M6VJbsF9usCU+WNOZTGP0hv nu9OQB+pfEbQul3qdKiVd1A5O5+3TSlo0dul6c0ziWqkj5ml0lqNszAc5qLXiKlRzUkHHVEQ tKqWZ+TVFUb8k6P4FnW5qKYieCuMlxuJR3jDLkTGT3U2xAdBRPBNMr7lgXva9dl6q0MEYswT iOozYsF1FrsUj9xVHCPfvJNGCyVIFNWX1IuE1OR6Z9SiGBdQtqKPY6YLO3Yh4WHtSCnOKomF LVEUbM6GfoKKk6yz0ooS24zCW2u31zhY8S1Pn+hEJ02DbIZMewI8XPdqdfVDnqXkMUGibC/X OHLU0aE5kUgws8DJviddP+p1iYEzjt8eFQzkg83FtN0WCpHGPWGF8DjoW58vFkcxXfUa27Yq RBxU3dyark34vL+x6TFjg85q25p73VD6sP/pCnwUZFgVvpu2rIuuE9wWJnrCim3o+3cqYn9A NGUojKnGRU58+SgJKalfSmCF2k04LO27x7uuZesGflq5kRg0ROhGdBvT9Xv47rscoc9HsAjx tEaX9CXgIP4LbjlMUXaBpM1cr5rKQhaYti9KOqI4OcUnnFnJBQARAQABzR9LcmlzIE1vb3Jl IDxrcmlzQGl4c3lzdGVtcy5jb20+wsGOBBMBCAA4FiEE6kMoZ0WccL4k6H+L0I7MhrJaycYF Alnp+coCGyMFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQ0I7MhrJaycaFgg/+J1TPhfrK 0SxNLbCSKrGCX6axk/2HezIuu0dPsX7Pv5FJptWKyyp9YqhUT4rmFhZnDg3mRvFp8qJgY1BF zlOfHBPMw+vevetuzj9XpGOUthNNXX2RS2YHmoTvaEBK/x17O5kAjPX1108jpXWx8p0/a8GE /xf1/BJHMUkk4Fc32QFzOqsTMAB4B9O3iogq6CVCfbqrC7trQuPsDv2gEguEu1JzGM0FpWtl tbvSSfrTc5kHQjTjZZQIfow6yS8mfforEDeSFdsf+Q8eIfOt7X1B+xhVOrRhoyYVCV4FvcWh wz/8kFLQKGXZ7Fp52FwWTfVDUzmmZji+5Vp5cQAnVLO2Zr5vNusJbn+jiv6TH6LPp6WLZcb7 cEZTgON2rFSBMb73wleIp2+CPZJ84nzM0fpMHsZPZmVrgxf+OPHdoAChAIXiN1gUBqAhJ2b7 xvycL/Yw2mzcQutlH7us6difgtpczpHTOS3ammVmzwf/Vgtqz+S8jFGNqFQ+CdAfAY1ZYkt/ +yO79mtiZX+/wdf0JH9Rcmyr28rSglGh2hA6zc5swKzSaS8F94EOir3K9jN+DLsS6L92SBmL WIRcgXC9mzA5jIOaKZC03JR2HSwww4NZqd0S/BS91Zjf9Oa8fPqB7pKTrLLJmpQzYyVnoiDC Sb+IkLRHj1fH2fXeq7yl9jZ3+M7OwU0EWen5ygEQAMCa4R90ZXRtv0nM21/v9tx8AtSS7cWI JvMLMhE/0DWOqTbakmdUtoX8fUg/r/jEZ5hnuT0EtTfjou8mxZIOvu3tlG3mb4Fkyc7XYylh 0VPt+vnG4dRLsfzZJduksC8CQlPX9NxM4UeSi/KX5XMK+5eEZV6Z9mhVTnrM40AgngUOdON9 aZJVc39aCwTYT7BZ4mq6jFfMaNxp3GxGHp5f/oE7VVRb+Fj6xq4BP60w4gQS6W5suLY4+hHI 3bkQ9N/M9RbXpa2N5zAZnRFPw9j06kwJGHrHdXSSKF0OTa0GXO4KtUxGUhMkRrZ7vOSPJO8l R3x0cEN1/a76Vn3lsX+xJH28zfhsj6taZwPoP9GOFzuEIzM7PZ7fVm4Ao17i/r10FfrzOWW6 0QehjJ9Mr4Gjj7YxTOWc5NCuZv/jscOzzsLBoVQAUYu9fnCPUBkGpCutO2vAmJkpUkupmtHo +94b87cXtcCFRxRBXTiUhD/Ge9Y+ZElxWgF5mFAs0Lk3Y2t55vWh05SOWiu2JUGucXl3zdfC 5+FrrFs5XfIEFGVBjLsFiwiBII+Eo2QWSjwumrodVGmY4YEieNn1Gje7CxAlDTjjSSPBlpuh Z4gwQ6DSm7BOdlItDhNCkH6J8cWMO05zEnO3b7lcUDMi1xXbiYYKXz1hq8RkU6BSkPo1mYOq hY2XABEBAAHCwXYEGAEIACAWIQTqQyhnRZxwviTof4vQjsyGslrJxgUCWen5ygIbDAAKCRDQ jsyGslrJxvhyD/0Zg5xAiakqry4EzUHkyWGHTjYQtD7qJl+3OT+UCUAceCSz9XsoMSRiVTyN 1gg6DPDqaixF3qq1DEoEiU2HkL4Hpl34oveHDFGLNiyqZJ11T0TG6PhA294PuxdyZgHDqyEz FOpLmZaLQiCs34CX7tDubaGZJjdLVljQ4+S/BMeaBCT8Z16NnuYitLMmwAaaaNl2Sb4n4edA alRYdKY48d3Jl8usKZDVYFiAbTwxzTDM8Zs4owTo4Ynx5XIW0vXD1hkxdEDf3pJz0cxek3Nn 0Nbmayg4ZOvYunRbS4soavwxPmVjIUr8gtxF7SDF2wg+EHMr2Fmnggw4BXqo3P/PKMIAVYZT Bl60+5VgFBqejds0o9Reo9yaUCNSL1DVa8FSWXkS/kFnkud1KIGBeTDIoEidBMZOtRg1obtR G2xdV5G+6NMn2KTUmsPmbwKyf/ii1fujcKXyVHEX0loG3JJ+LNw0zWH3EbrIpiVHZOkk0Dny +mlVdpBoWxz0WvK2mDttr3Qge9a0o1dZ1BTg/+aNxQO04+hVKPk7OEbdR6LpW4ExNGDpXBBN Acr4FZ0yTw8+7XLx2A/F5ETkOPBLUU4KkwMuGCvNeazwkZsjizTg28COWlodT1HQLecstUM6 THbcZJc4jIgSAjKQ87RQ/lCVBCGoaEbJ/zcrsMh5RbMrWszApQ== Message-ID: <70e66ee6-af44-1c48-8daf-c48215dfcf1e@ixsystems.com> Date: Mon, 26 Nov 2018 13:58:12 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.3.1 MIME-Version: 1.0 In-Reply-To: <70b84814-89a8-fdef-7092-1cb4a46785e1@yuripv.net> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US X-Rspamd-Queue-Id: AEA6B830D8 X-Spamd-Result: default: False [-4.56 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[ixsystems-com.20150623.gappssmtp.com]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arch@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[ixsystems-com.20150623.gappssmtp.com:+]; MX_GOOD(-0.01)[cached: ALT3.ASPMX.L.GOOGLE.com]; RCVD_IN_DNSWL_NONE(0.00)[d.2.b.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.89)[-0.892,0]; DMARC_POLICY_ALLOW(-0.50)[ixsystems.com,none]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; IP_SCORE(-0.65)[ipnet: 2607:f8b0::/32(-1.80), asn: 15169(-1.37), country: US(-0.09)]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 18:59:21 -0000 On 11/26/18 1:09 PM, Yuri Pankov wrote: > Gerard Seibert wrote: >> TO WHOM IT MAY CONCERN >> >> The “SMBv1” protocol is a security hazard and was depreciated by Microsoft in >> 2014. There is virtually no use for it anymore. >> >> The “mount_smbfs” utility in FreeBSD only uses that protocol, which results >> in making it useless with newer versions of Microsoft’s operating systems, as >> well as other OS’s that have depreciated the use of SMBv1. >> >> I would like to suggest that FreeBSD do one of the following: >> >> 1) Remove “mount_smbfs” from FreeBSD. This would probably be in versions 12.1 >> or 13. It is perhaps too late to get into FreeBSD 12. > I don't think this is reasonable, more so in a hurry, as this is a > client, and doesn't impose any security issues. > >> 2) Update “mount_smbfs” so that it is compatible with versions SMBv3 and >> greater. While "SMBv2" is not dead, it is definitely comatose. This would be a >> better idea if someone had the time to do it. > There's an entry in https://wiki.freebsd.org/DevSummit/201810: > > ---------------------------------------------------------------------- > updated mount SMBFS smbv3 support (iXsystems) > ---------------------------------------------------------------------- > > I wonder if we could get a bit more information on this -- is this just > a plan, or is it being actively worked on/ready for integration? > We were discussing it at the time, but as of now it's not actively being worked on from the iX side. -- Kris Moore Vice President of Engineering iXsystems, Inc Ph: (408) 943-4100 Ph: (408) 943-4101 The Groundbreaking TrueNAS M-Series - Enterprise Storage & Servers Driven By Open Source From owner-freebsd-arch@freebsd.org Tue Nov 27 15:58:50 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6EC27115196B for ; Tue, 27 Nov 2018 15:58:50 +0000 (UTC) (envelope-from etnapierala@gmail.com) Received: from mail-ot1-f46.google.com (mail-ot1-f46.google.com [209.85.210.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 93E05826C2 for ; Tue, 27 Nov 2018 15:58:49 +0000 (UTC) (envelope-from etnapierala@gmail.com) Received: by mail-ot1-f46.google.com with SMTP id s5so20530154oth.7 for ; Tue, 27 Nov 2018 07:58:49 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=vqfIXqHBVfQcGha+1J4jtI5s0E6jr7uM+8PDsGv6Nnk=; b=ayW9dRTTuqr7AcKOjbO14GjoIpJ44lrnxz640uvzZbL7UGqsLxGKvMsc4AmuQ+ZUhg ZvWdD84Kdfg/CsQURHlZUiCQUwdANxyk4jMvtXqsJHDs+svmCuYjQ8FuFWBW541EEEGZ M1XlwGnkvRVDL3GHlZUVwiq6E1rW8X3vB1w4odXmWIwjIO0CSvLVCYyUwaf3XV01mK00 e7VxT6S/+Z+91Pk6XHA0HYxKnMxTkTO6dwUpZqq4Jl9K30xXSJDmfnmF4RMcqo4qFVmr OQ57hUj5DoZIbVzfBJWzFA2YAVJnmyZx10+Oxq902atFj0lnJdwEpLaQHqq+u+a5J9FA M41A== X-Gm-Message-State: AA+aEWb9Cg6lUllodPnC7CP3+4gS9vvgXC+wGi1j1HePNUWWqs5P1Yy2 Ya8w1jGC0DOeonfGj5CakrzF7uAgCROXiDXC5TaGVI68 X-Google-Smtp-Source: AFSGD/WqsGvQegVQOvnjOzT7s7l8NXurk8oOKCHYg4QJM8bUEdgzPg5GvANOoZC3Ft5WvFfOi6C4sflPXYGfqyWILSA= X-Received: by 2002:a9d:7450:: with SMTP id p16mr13896241otk.247.1543334328628; Tue, 27 Nov 2018 07:58:48 -0800 (PST) MIME-Version: 1.0 References: <20181126121926.00007626@seibercom.net> In-Reply-To: <20181126121926.00007626@seibercom.net> From: Edward Napierala Date: Tue, 27 Nov 2018 15:58:36 +0000 Message-ID: Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system To: gerard@seibercom.net Cc: freebsd-arch@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 93E05826C2 X-Spamd-Result: default: False [-3.95 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; RWL_MAILSPIKE_GOOD(0.00)[46.210.85.209.rep.mailspike.net : 127.0.0.18]; R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arch@freebsd.org]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[46.210.85.209.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.95)[-0.951,0]; RCVD_TLS_LAST(0.00)[]; FORGED_SENDER(0.30)[trasz@freebsd.org,etnapierala@gmail.com]; R_DKIM_NA(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]; FROM_NEQ_ENVFROM(0.00)[trasz@freebsd.org,etnapierala@gmail.com]; IP_SCORE(-0.99)[ipnet: 209.85.128.0/17(-3.48), asn: 15169(-1.38), country: US(-0.09)]; RCVD_COUNT_TWO(0.00)[2] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2018 15:58:50 -0000 pon., 26 lis 2018 o 17:20 Gerard Seibert napisa=C5= =82(a): > > TO WHOM IT MAY CONCERN > > The =E2=80=9CSMBv1=E2=80=9D protocol is a security hazard and was depreci= ated by Microsoft in > 2014. There is virtually no use for it anymore. > > The =E2=80=9Cmount_smbfs=E2=80=9D utility in FreeBSD only uses that proto= col, which results > in making it useless with newer versions of Microsoft=E2=80=99s operating= systems, as > well as other OS=E2=80=99s that have depreciated the use of SMBv1. > > I would like to suggest that FreeBSD do one of the following: > > 1) Remove =E2=80=9Cmount_smbfs=E2=80=9D from FreeBSD. This would probably= be in versions 12.1 > or 13. It is perhaps too late to get into FreeBSD 12. > > 2) Update =E2=80=9Cmount_smbfs=E2=80=9D so that it is compatible with ver= sions SMBv3 and > greater. While "SMBv2" is not dead, it is definitely comatose. This would= be a > better idea if someone had the time to do it. FWIW, I believe SMBv3 is just a set of (largely optional) extensions to SMB= v2, not an entirely different protocol, like SMBv1 is. Which means, any versio= n that supports v3 is likely to also handle v2. There seems to be existing, working code in Nexenta, which is being upstreamed to Illumos: https://www.illumos.org/issues/9735 https://github.com/illumos/illumos-gate/pull/37 Their implementation descends from the one we have in base (and the one from OSX, which also descends from FreeBSD), so it should be possible to merge it. From owner-freebsd-arch@freebsd.org Tue Nov 27 16:56:06 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1A13E1153FC1 for ; Tue, 27 Nov 2018 16:56:06 +0000 (UTC) (envelope-from yuripv@yuripv.net) Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5E848863B6; Tue, 27 Nov 2018 16:56:05 +0000 (UTC) (envelope-from yuripv@yuripv.net) Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 3FF2321D23; Tue, 27 Nov 2018 11:56:04 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute5.internal (MEProxy); Tue, 27 Nov 2018 11:56:04 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yuripv.net; h= subject:to:cc:references:from:message-id:date:mime-version :in-reply-to:content-type; s=fm3; bh=RzKvHCAxIsrgZGT54healUQR7P/ PI+BBRbDhB9RS2bY=; b=pnFMyvGJxuOgKYrMIerXYS6BRJ57K7k31FXeuWGMe3H Szjd2XqYN/127Khd5+BzqsOlVMjwV9OoaeTs9GPy/EFo3dDOiL07UXhy3ZbsVtab +y5BHPo/gik2n7tUEmCFD2lf3LSd51rideGxwJrhOK6OvKZOYh1PC+KcJ/xUArC/ HLVYMgHhV7F8ZuzeAbssNq84t0wPEhoLJYM7pLJ3pQ0Dk0XxWJRtP3SKZPBSFIEd 2gekZv0y1/ucw3abJdguXJDUtMhXZhKfKy20AqIAMP63utOBY4jCBQ5s1d0U7nvM P7HaJcrfLXyvzknKVXAI1NfqhvAWinaNUtjuRvctxRw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=RzKvHC AxIsrgZGT54healUQR7P/PI+BBRbDhB9RS2bY=; b=jgTwQT+fuh2rj6qN2944Os 28cwmCE6abocGWlBQGKVWySjDUjreIquuUwVFlV2RtUII34eESskbyTjnxcZ79zy mNwO8LMDbPfc3CCulUj3Ubpv6OGvpQCZ3SzOGnBZ0LJNggJQZ3NTYMN+GwFLlj5Z p+iq7vxTM/puvAYssEJos0oFoNhOgX1LlI4QnVHDa3CLkXvI3utfIxQf/pPNrJog PRCR/71jKxHKJ4DJqF8ErxRcjKxt3XxZslaXduyJqLdwbA5fFcDPUizXCgSguiGN uIKdc0SgaJdr1a8TI/Wjtai7sgDB6EJAFhepWYI9UjBk/o3E64cO8LudBpiKKUSg == X-ME-Sender: X-ME-Proxy: Received: from thor.yuripv.net (unknown [62.183.125.159]) by mail.messagingengine.com (Postfix) with ESMTPA id C703A102F3; Tue, 27 Nov 2018 11:56:02 -0500 (EST) Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system To: Edward Napierala , gerard@seibercom.net Cc: freebsd-arch@freebsd.org References: <20181126121926.00007626@seibercom.net> From: Yuri Pankov Openpgp: preference=signencrypt Autocrypt: addr=yuripv@yuripv.net; keydata= xsBNBFu8u6IBCADB11gP0QwnorrHjqAtKLHKHNHskhy0s7jqJKfx0YqXgVBKGLJ9/mjLAz0F CBNvemHSDDTs0mEZ9cBKKi6cmsav6+UQgr//yai6hvXLBJqKchSFO4MhmdvBtsGFq1yKz5Zi uhjmimKyIpgBgvMdbgGbGq6cnSB2uEPmZuJr419SVRODOkXukU+F5WHgaHzDdHAIu1asCt2B +6msxqIqlFWcXyZyTGicTGGvC/PFIsVRUtD1dIJANTC876g7DTb7LZXWiWwJpSJ4GKMXMHVX Ct9BoQ4i3nhKbOxb6Io1wsy+NFyWsTJ9KYrxKKPJP3oG8BWb/cqlFqnE4eNSsiq2q7krABEB AAHNH1l1cmkgUGFua292IDx5dXJpcHZAeXVyaXB2Lm5ldD7CwJcEEwEIAEECGwMFCQWjmoAF CwkIBwMFFQoJCAsFFgMCAQACHgECF4AWIQT4arc+w94tPi0v/3CTi+B/sSrhbAUCW708wAIZ AQAKCRCTi+B/sSrhbPxBB/961alcU091O+yKT5/oReHVc/PX0Tz4sW3V44AcgLfYlrZavCro EFz90qmCrl0xqEwuAKcC4bjmL8SjPWAhSN6IH9nxdw+HeZnAPiHm/q679Bu47+nHBl3qD/9p +t1PkKeKZfaWToFMt1nq06ytSu6VLMCwLdlDNe6DReX0ex/afEqKsuaIZSKL4UYjRwklp8PU Uf98QkrfapyHB67hQMzfI4tPeJaYyv0cTgfq3kUWJx1V6Xi0b6Zxj4ZrB2TXvaMO5g7yhU9E E3WWAvoe4FgB3a7dHe8atnHhq5+Cuvm6+LD4Jh7jvMAE5UMN+xxQpnGpNghHjaCy4vXrLRBZ nhRYzsBNBFu8u6IBCADKih3Q933rDNj4ZA8FhBQ2RlmBgvwOLcDPIL3h0V7h38y3+HisgFSc XACDsdrTlYZ1bRXkD9FHENynBcv0l/3uGJDk8jaGIDE0TP8OQBRp+IaU9/BHnAqrKxTJGIol Dahy2m+yx2yhdc6B4ujWMDqCF1rWOD+ymOWw+VLllOkrHcZa5PJtX9UOGbApZl8ZTM8El4CA NN8F1bg9MWzUi+8LYoGWGc+BwsFS1OUB1c4SPgMu5fD4Wfsr9yRl06fdpEA2YT7B/j5/5RSC 0sE2Zs/tmJ/JRflHJ12ycj59ma2xQMfEJF40hZDpMFQmZvbVqgEg3ocQcltjbxlIKZ/mjC4z ABEBAAHCwHwEGAEKACYWIQT4arc+w94tPi0v/3CTi+B/sSrhbAUCW7y7ogIbDAUJBaOagAAK CRCTi+B/sSrhbIDcCACqAZMcoxUBLZa40a5b24j5i1jplvCYYb3h+Q5lt5+BFJ87kCb4dJuU D3kh2i29BrxWQWa9WNue9ozxeYkbkfXubQYXexVolRsnh64OdGsE8KvorBFBB3zdK/GRt2Jy +jsnTfUWuQllbzMP0MfhCDMk1Mo8WvDH2/cOEP/yLKf20a+cd6nLs7bidjmGXo9pyuBKAtV6 Kv+VRu54AL+A/UBYu/eB3Dtvzcnut+1Zq6KaP++kUwPwINLIk04OBDwN0zRNTiqMAFYYyz2v ZHBB6E1th/l//ZC5b9Dk0ZpFI1bYdL9ymnrZe1MqbGPnDCToQxu00T/pZCm6Z92YrZQYuNwl Message-ID: Date: Tue, 27 Nov 2018 19:55:54 +0300 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.3.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="UrapcRYepkm2apszBDy6aYULFTj49EYBM" X-Rspamd-Queue-Id: 5E848863B6 X-Spamd-Result: default: False [-9.29 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[yuripv.net,messagingengine.com]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; R_SPF_ALLOW(-0.20)[+ip4:66.111.4.28]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; HAS_ATTACHMENT(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain]; DMARC_NA(0.00)[yuripv.net]; TO_DN_SOME(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: in2-smtp.messagingengine.com]; DKIM_TRACE(0.00)[yuripv.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-0.99)[-0.990,0]; SIGNED_PGP(-2.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[28.4.111.66.list.dnswl.org : 127.0.5.1]; RECEIVED_SPAMHAUS_PBL(0.00)[159.125.183.62.zen.spamhaus.org : 127.0.0.11]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.4.0/24, country:US]; MID_RHS_MATCH_FROM(0.00)[]; IP_SCORE(-3.59)[ip: (-9.37), ipnet: 66.111.4.0/24(-4.63), asn: 11403(-3.88), country: US(-0.09)]; FROM_EQ_ENVFROM(0.00)[] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2018 16:56:06 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --UrapcRYepkm2apszBDy6aYULFTj49EYBM Content-Type: multipart/mixed; boundary="sQAUzOE4SlYgHLLERgfzsw0iWeAEuoR7p"; protected-headers="v1" From: Yuri Pankov To: Edward Napierala , gerard@seibercom.net Cc: freebsd-arch@freebsd.org Message-ID: Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system References: <20181126121926.00007626@seibercom.net> In-Reply-To: --sQAUzOE4SlYgHLLERgfzsw0iWeAEuoR7p Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Edward Napierala wrote: > pon., 26 lis 2018 o 17:20 Gerard Seibert napisa=C5= =82(a): >> >> TO WHOM IT MAY CONCERN >> >> The =E2=80=9CSMBv1=E2=80=9D protocol is a security hazard and was depr= eciated by Microsoft in >> 2014. There is virtually no use for it anymore. >> >> The =E2=80=9Cmount_smbfs=E2=80=9D utility in FreeBSD only uses that pr= otocol, which results >> in making it useless with newer versions of Microsoft=E2=80=99s operat= ing systems, as >> well as other OS=E2=80=99s that have depreciated the use of SMBv1. >> >> I would like to suggest that FreeBSD do one of the following: >> >> 1) Remove =E2=80=9Cmount_smbfs=E2=80=9D from FreeBSD. This would proba= bly be in versions 12.1 >> or 13. It is perhaps too late to get into FreeBSD 12. >> >> 2) Update =E2=80=9Cmount_smbfs=E2=80=9D so that it is compatible with = versions SMBv3 and >> greater. While "SMBv2" is not dead, it is definitely comatose. This wo= uld be a >> better idea if someone had the time to do it. >=20 > FWIW, I believe SMBv3 is just a set of (largely optional) extensions to= SMBv2, > not an entirely different protocol, like SMBv1 is. Which means, any ve= rsion > that supports v3 is likely to also handle v2. >=20 > There seems to be existing, working code in Nexenta, which is being > upstreamed to Illumos: >=20 > https://www.illumos.org/issues/9735 > https://github.com/illumos/illumos-gate/pull/37 >=20 > Their implementation descends from the one we have in base (and the one= > from OSX, which also descends from FreeBSD), so it should be possible t= o > merge it. Yes, we have it working and tested pretty well. And that's exactly the reason I was asking if there's work in progress for smb2/3 client or not before even starting looking into porting the code. The problem here is that the code has grown library dependencies which are CDDL-licensed, which aren't easy to break (if at all), so if ported, it will be covered by WITHOUT_CDDL; hopefully that's acceptable. It's possible that Nexenta-authored code could be relicensed under BSDL (I'll have to ask, we already have a precedent with localedef), but sadly that doesn't cover everything. --sQAUzOE4SlYgHLLERgfzsw0iWeAEuoR7p-- --UrapcRYepkm2apszBDy6aYULFTj49EYBM Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE+Gq3PsPeLT4tL/9wk4vgf7Eq4WwFAlv9dyEACgkQk4vgf7Eq 4WwDZQf8CxGpwQr5mpKdxoIEk35psjlrfb1tHu4szzl/Gp9T5edpUe3Wl+MPY24l EP+3dIC11vfYiwFWH8IVc1Rn709bNVWs2e5Bt3oXAnicwwdY45CbscemlM0ENhFT AsipW8zNlk0RkJ184XqgH1VTZWq3kwUOOz/rnnExWY37InYgGLQLPTmrrMvPPYJn XXG+mVDFY4sGOBwrH4ftjtpyp8uYoP5RW/4vfBS/whoQ84Q07gCJ8HbFyvT3xAa6 qb2hRvmfgarmpG2U0zbMFk7iWQYtKAM/0h7rYuILDl5XOulgO3yJwWa1Nm2ZuchF JYIL7q6D4QlkpE1gFbqFxxZZPaGsGw== =o7cj -----END PGP SIGNATURE----- --UrapcRYepkm2apszBDy6aYULFTj49EYBM-- From owner-freebsd-arch@freebsd.org Tue Nov 27 17:15:01 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1ECD311550D1 for ; Tue, 27 Nov 2018 17:15:01 +0000 (UTC) (envelope-from brooks@spindle.one-eyed-alien.net) Received: from spindle.one-eyed-alien.net (spindle.one-eyed-alien.net [199.48.129.229]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5F4D389003; Tue, 27 Nov 2018 17:15:00 +0000 (UTC) (envelope-from brooks@spindle.one-eyed-alien.net) Received: by spindle.one-eyed-alien.net (Postfix, from userid 3001) id 7BA763C475F; Tue, 27 Nov 2018 17:14:59 +0000 (UTC) Date: Tue, 27 Nov 2018 17:14:59 +0000 From: Brooks Davis To: Yuri Pankov Cc: Edward Napierala , gerard@seibercom.net, freebsd-arch@freebsd.org Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system Message-ID: <20181127171459.GC52968@spindle.one-eyed-alien.net> References: <20181126121926.00007626@seibercom.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="4ZLFUWh1odzi/v6L" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.4 (2018-02-28) X-Rspamd-Queue-Id: 5F4D389003 X-Spamd-Result: default: False [-7.54 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; DMARC_NA(0.00)[freebsd.org]; AUTH_NA(1.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: spindle.one-eyed-alien.net]; NEURAL_HAM_SHORT(-0.99)[-0.993,0]; R_SPF_NA(0.00)[]; SIGNED_PGP(-2.00)[]; FORGED_SENDER(0.30)[brooks@freebsd.org,brooks@spindle.one-eyed-alien.net]; R_DKIM_NA(0.00)[]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:36236, ipnet:199.48.128.0/22, country:US]; FROM_NEQ_ENVFROM(0.00)[brooks@freebsd.org,brooks@spindle.one-eyed-alien.net]; IP_SCORE(-3.64)[ip: (-9.45), ipnet: 199.48.128.0/22(-4.73), asn: 36236(-3.92), country: US(-0.09)]; RCVD_COUNT_TWO(0.00)[2] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2018 17:15:01 -0000 --4ZLFUWh1odzi/v6L Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Nov 27, 2018 at 07:55:54PM +0300, Yuri Pankov wrote: > Edward Napierala wrote: > > pon., 26 lis 2018 o 17:20 Gerard Seibert napisa?= ?(a): > >> > >> TO WHOM IT MAY CONCERN > >> > >> The ???SMBv1??? protocol is a security hazard and was depreciated by M= icrosoft in > >> 2014. There is virtually no use for it anymore. > >> > >> The ???mount_smbfs??? utility in FreeBSD only uses that protocol, whic= h results > >> in making it useless with newer versions of Microsoft???s operating sy= stems, as > >> well as other OS???s that have depreciated the use of SMBv1. > >> > >> I would like to suggest that FreeBSD do one of the following: > >> > >> 1) Remove ???mount_smbfs??? from FreeBSD. This would probably be in ve= rsions 12.1 > >> or 13. It is perhaps too late to get into FreeBSD 12. > >> > >> 2) Update ???mount_smbfs??? so that it is compatible with versions SMB= v3 and > >> greater. While "SMBv2" is not dead, it is definitely comatose. This wo= uld be a > >> better idea if someone had the time to do it. > >=20 > > FWIW, I believe SMBv3 is just a set of (largely optional) extensions to= SMBv2, > > not an entirely different protocol, like SMBv1 is. Which means, any ve= rsion > > that supports v3 is likely to also handle v2. > >=20 > > There seems to be existing, working code in Nexenta, which is being > > upstreamed to Illumos: > >=20 > > https://www.illumos.org/issues/9735 > > https://github.com/illumos/illumos-gate/pull/37 > >=20 > > Their implementation descends from the one we have in base (and the one > > from OSX, which also descends from FreeBSD), so it should be possible to > > merge it. >=20 > Yes, we have it working and tested pretty well. And that's exactly the > reason I was asking if there's work in progress for smb2/3 client or not > before even starting looking into porting the code. >=20 > The problem here is that the code has grown library dependencies which > are CDDL-licensed, which aren't easy to break (if at all), so if ported, > it will be covered by WITHOUT_CDDL; hopefully that's acceptable. It's > possible that Nexenta-authored code could be relicensed under BSDL (I'll > have to ask, we already have a precedent with localedef), but sadly that > doesn't cover everything. I think making this CDDL is fine. Certaintly better than failing to support SMBv2/v3. -- Brooks --4ZLFUWh1odzi/v6L Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJb/XuSAAoJEKzQXbSebgfAX60H/30jgIbSCKDHdn0edJm17AQ2 +GfKMyo0LEMOfURR7JHAKw7uABsCajOMEnJxpRi7P4htuth2qxQNOGAvNmCO8v44 xumJKzPUjRy6hSgk6BjrObchKJe6IUNO9XkoEN65p8+1sA6YGot0JTGGpQppQQhj QslsNRDHMJKYXnI+XpXg9+r9646EpSrVwcpVjRfa2YnmkbioNZtL3OVS3uavnWEJ 5CZjsR0b2bu1dfscuiAX+Afe4PKv0xelYqlR+v11fsHqM80HHvj4VIPJxBu192oR BXE9kI6xVQ3/FeZi3OGF9mzLSSi7i0dd2qQb6hkiH+FSF30ZxHqUbLNYeWvIKWQ= =Z++p -----END PGP SIGNATURE----- --4ZLFUWh1odzi/v6L-- From owner-freebsd-arch@freebsd.org Tue Nov 27 19:22:33 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4062D1158F47 for ; Tue, 27 Nov 2018 19:22:33 +0000 (UTC) (envelope-from gerard@seibercom.net) Received: from mail-yw1-xc43.google.com (mail-yw1-xc43.google.com [IPv6:2607:f8b0:4864:20::c43]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A29688E850 for ; Tue, 27 Nov 2018 19:22:32 +0000 (UTC) (envelope-from gerard@seibercom.net) Received: by mail-yw1-xc43.google.com with SMTP id x2so9623288ywc.9 for ; Tue, 27 Nov 2018 11:22:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seibercom.net; s=google; h=date:from:to:cc:subject:message-id:in-reply-to:references:reply-to :organization:mime-version:content-transfer-encoding; bh=MXpP5iP8HYvqLZT5kEMbOwTJOuiKFd0T0MGH5ceD7PY=; b=IhudMD7aG/y85Zu2eSRt8OXjpw5p01i/CrULyAsdNIDLhmN/0/xK/61+JsSmG8pqt7 vqj5wnQieo+1mA5nUPLSP8FBL507CeF4YuHxEgk1FGo9exQzzofkcYxZICXXMR9ELDXm ki1ox7nVSsWxzqElDs1q6TNh0hl9ohAKaDZVc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:in-reply-to :references:reply-to:organization:mime-version :content-transfer-encoding; bh=MXpP5iP8HYvqLZT5kEMbOwTJOuiKFd0T0MGH5ceD7PY=; b=oek7TyfGeIZbcX9JKDDfbz24W+Xxt94+DRCrmTmWc9W8CGVxco8WLVXDU1/YzMe6Br sDVBIt1rt+j0UxycYxIA6Ddu8NtNUASdcwcuoe99MZr1Df3OZXuhT/9n3G/1iGqH8RHq zN9MWHEcKm1UKx3WA/8JAtfxfGVPFKhd88ManaFwjE4OkeRlI9Ai89JbNzBTBf41O3fD 2QVPkEZs5DiqNTMwIdia0WOCh804f+EXNbv8G12TbTN3BCdnciEq58cr/hbhtDpeKAJM n75ZhZL/UT6dkxKR052X3/s4og0azTEwSuXawmFwB/uQRdDMcOJeFh7BY9jbL9a7QLxZ ZZBA== X-Gm-Message-State: AGRZ1gJBpwyfKCR5Cr6w35y00XQpIavx9rc1U5kgXRTRj3amjDSegYEE JD62pNKgB0azRnNT4x+B6EOC6A== X-Google-Smtp-Source: AJdET5fPt5iGYfbZylMkSUzxQ3nxK9p3cjaq2SASNnR6Ve1eQ7TM2lgrI0Sdu7ChqEpYwYGYic3ETQ== X-Received: by 2002:a81:ad27:: with SMTP id l39mr35686615ywh.301.1543346097270; Tue, 27 Nov 2018 11:14:57 -0800 (PST) Received: from scorpio.seibercom.net (cpe-174-109-225-250.nc.res.rr.com. [174.109.225.250]) by smtp.gmail.com with ESMTPSA id e194sm3412501ywa.85.2018.11.27.11.14.55 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 27 Nov 2018 11:14:56 -0800 (PST) Received: from localhost (cpe-174-109-225-250.nc.res.rr.com [174.109.225.250]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: gerard@seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 434D4Z6kXGzTKB; Tue, 27 Nov 2018 14:14:54 -0500 (EST) Date: Tue, 27 Nov 2018 14:14:52 -0500 From: Gerard Seibert To: freebsd-arch@freebsd.org Cc: Yuri Pankov , Edward Napierala , Brooks Davis Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system Message-ID: <20181127141452.000043c7@seibercom.net> In-Reply-To: <20181127171459.GC52968@spindle.one-eyed-alien.net> References: <20181126121926.00007626@seibercom.net> <20181127171459.GC52968@spindle.one-eyed-alien.net> Reply-To: freebsd-arch@freebsd.org Organization: Seibercom NET X-Mailer: Claws Mail 3.17.1 (GTK+ 2.24.32; x86_64-w64-mingw32) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: A29688E850 X-Spamd-Result: default: False [7.77 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[freebsd-arch@freebsd.org]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; HAS_ORG_HEADER(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[seibercom.net:+]; MX_GOOD(-0.01)[cached: alt1.aspmx.l.google.com]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; IP_SCORE(0.89)[ip: (7.70), ipnet: 2607:f8b0::/32(-1.78), asn: 15169(-1.38), country: US(-0.09)]; REPLYTO_EQ_TO_ADDR(5.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[250.225.109.174.zen.spamhaus.org : 127.0.0.10]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[seibercom.net]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; NEURAL_SPAM_SHORT(0.75)[0.748,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arch@freebsd.org]; DMARC_NA(0.00)[seibercom.net]; NEURAL_SPAM_MEDIUM(0.98)[0.977,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_SPAM_LONG(0.66)[0.665,0]; RCVD_IN_DNSWL_NONE(0.00)[3.4.c.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; GREYLIST(0.00)[pass,body] X-Rspamd-Server: mx1.freebsd.org X-Spam: Yes X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2018 19:22:33 -0000 On Tue, 27 Nov 2018 17:14:59 +0000, Brooks Davis stated: >On Tue, Nov 27, 2018 at 07:55:54PM +0300, Yuri Pankov wrote: >> Edward Napierala wrote: >> > pon., 26 lis 2018 o 17:20 Gerard Seibert >> > napisa??(a): >> >> >> >> TO WHOM IT MAY CONCERN >> >> >> >> The ???SMBv1??? protocol is a security hazard and was depreciated by >> >> Microsoft in 2014. There is virtually no use for it anymore. >> >> >> >> The ???mount_smbfs??? utility in FreeBSD only uses that protocol, which >> >> results in making it useless with newer versions of Microsoft???s >> >> operating systems, as well as other OS???s that have depreciated the >> >> use of SMBv1. >> >> >> >> I would like to suggest that FreeBSD do one of the following: >> >> >> >> 1) Remove ???mount_smbfs??? from FreeBSD. This would probably be in >> >> versions 12.1 or 13. It is perhaps too late to get into FreeBSD 12. >> >> >> >> 2) Update ???mount_smbfs??? so that it is compatible with versions >> >> SMBv3 and greater. While "SMBv2" is not dead, it is definitely >> >> comatose. This would be a better idea if someone had the time to do >> >> it. >> > >> > FWIW, I believe SMBv3 is just a set of (largely optional) extensions to >> > SMBv2, not an entirely different protocol, like SMBv1 is. Which means, >> > any version that supports v3 is likely to also handle v2. >> > >> > There seems to be existing, working code in Nexenta, which is being >> > upstreamed to Illumos: >> > >> > https://www.illumos.org/issues/9735 >> > https://github.com/illumos/illumos-gate/pull/37 >> > >> > Their implementation descends from the one we have in base (and the one >> > from OSX, which also descends from FreeBSD), so it should be possible to >> > merge it. >> >> Yes, we have it working and tested pretty well. And that's exactly the >> reason I was asking if there's work in progress for smb2/3 client or not >> before even starting looking into porting the code. >> >> The problem here is that the code has grown library dependencies which >> are CDDL-licensed, which aren't easy to break (if at all), so if ported, >> it will be covered by WITHOUT_CDDL; hopefully that's acceptable. It's >> possible that Nexenta-authored code could be relicensed under BSDL (I'll >> have to ask, we already have a precedent with localedef), but sadly that >> doesn't cover everything. > >I think making this CDDL is fine. Certaintly better than failing to >support SMBv2/v3. > >-- Brooks SEE: https://en.wikipedia.org/wiki/Server_Message_Block#SMB_3.1.1 Particularly the section dealing with SMBv3.11. That is now the default in Win 10. It makes no sense to not support the latest version available. In fact, it would be counter-productive. SMB 3.1.1 was introduced with Windows 10 and Windows Server 2016. This version supports AES 128 GCM encryption in addition to AES 128 CCM encryption added in SMB3, and implements pre-authentication integrity check using SHA-512 hash. SMB 3.1.1 also makes secure negotiation mandatory when connecting to clients using SMB 2.x and higher. -- Gerard From owner-freebsd-arch@freebsd.org Fri Nov 30 16:40:05 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2585B1148FBE for ; Fri, 30 Nov 2018 16:40:05 +0000 (UTC) (envelope-from rebecca.clark@mediakraftzone.com) Received: from n1nlsmtp02.shr.prod.ams1.secureserver.net (n1nlsmtp02.prod.ams1.secureserver.net [188.121.43.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "relay-hosting.secureserver.net", Issuer "Starfield Secure Certificate Authority - G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4989E6B811 for ; Fri, 30 Nov 2018 16:40:04 +0000 (UTC) (envelope-from rebecca.clark@mediakraftzone.com) Received: from n3plcpnl0157.prod.ams3.secureserver.net ([160.153.155.8]) by : HOSTING RELAY : with ESMTP id SlWUg43BJ9VoMSlWUgBVD5; Fri, 30 Nov 2018 09:20:10 -0700 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mediakraftzone.com; s=default; h=Content-Type:MIME-Version:Message-ID:Date: Subject:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=b8K31q6ANAwpaDZeCSyHZhKanCrtjsO8FxmNYyDLvyc=; b=kUhaeKfovT4zQbyYaXu1mGXrvm oVH1THhaWaHUFa5lTaGZzK6YKzqFZIFx/6S3SKqe7toYvpzN4ZPkPthZEtU+hthKSCx7B9PxoHZmn VlXziv1o9HiCsJbnFHBdH5FMBuQmq1ZBKNuT6kdeY3WZvrTYtqII5olAeeasGwUyXJHFWVWlaGroZ QztHhK3cqnu5WlXywGupi32kIRjb66ea7nWAvhFD4DWYa1OOA8eHAFMeJyZfMnEEX8fyhBgbxiaQo CSDhbexOfnQA/f3Rkb5qBC+3h2F/e+SYdotEhP0f9mEu85PydnIUXHbi7Dun1w2I0a56nA5x/YbGi ft/yDTuA==; Received: from [49.206.10.117] (port=5682 helo=AdminPC) by n3plcpnl0157.prod.ams3.secureserver.net with esmtpa (Exim 4.91) (envelope-from ) id 1gSlIf-00AQXs-HG for freebsd-arch@freebsd.org; Fri, 30 Nov 2018 09:05:53 -0700 From: "Rebecca Clark" To: Subject: Zabbix Users Contacts Date: Fri, 30 Nov 2018 21:35:49 +0530 Message-ID: MIME-Version: 1.0 X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdSIxo7ce57KJOFHSsyxvtJtKoaB9g== Content-Language: en-us X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - n3plcpnl0157.prod.ams3.secureserver.net X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - mediakraftzone.com X-Get-Message-Sender-Via: n3plcpnl0157.prod.ams3.secureserver.net: authenticated_id: rebecca.clark@mediakraftzone.com X-Authenticated-Sender: n3plcpnl0157.prod.ams3.secureserver.net: rebecca.clark@mediakraftzone.com X-Source: X-Source-Args: X-Source-Dir: X-CMAE-Envelope: MS4wfLis0huuy4YZ0Wd/CYsyUHSgWV9JOy3nXZeT4K6xDs7MTOg/gdRriykclOtfcvw5RvO/8cNkk5ldJusyrk+DoAgoK5paGtFs2ajeruClzoqAkmyo82N6 Wsv4PXAFTATLpzFJUTQaKyP7WVPJJwt0imdyug926pwYRi+v9kZDkZZ5uj27HhrDNRFfASIPxM9KZUIjjYnLkAajRt3UHdz8MYoxb38z3lfOVQv/OS7cIN/N X-Rspamd-Queue-Id: 4989E6B811 X-Spamd-Result: default: False [6.28 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; MX_INVALID(0.50)[cached]; R_SPF_ALLOW(0.00)[+ip4:188.121.43.0/24]; HAS_X_SOURCE(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[mediakraftzone.com:~]; HAS_X_ANTIABUSE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; IP_SCORE(0.02)[ipnet: 188.121.40.0/22(0.08), asn: 26496(0.12), country: US(-0.09)]; ASN(0.00)[asn:26496, ipnet:188.121.40.0/22, country:US]; MID_RHS_MATCH_FROM(0.00)[]; HAS_X_AS(0.00)[rebecca.clark@mediakraftzone.com]; RECEIVED_SPAMHAUS_PBL(0.00)[117.10.206.49.zen.spamhaus.org : 127.0.0.11]; ARC_NA(0.00)[]; RECEIVED_SPAMHAUS_XBL(3.00)[8.155.153.160.zen.spamhaus.org : 127.0.0.4]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_SPAM_SHORT(0.78)[0.779,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; DMARC_NA(0.00)[mediakraftzone.com]; NEURAL_SPAM_MEDIUM(0.98)[0.985,0]; RCPT_COUNT_ONE(0.00)[1]; BAD_REP_POLICIES(0.10)[]; NEURAL_SPAM_LONG(0.99)[0.993,0]; RCVD_IN_DNSWL_NONE(0.00)[194.43.121.188.list.dnswl.org : 127.0.5.0]; R_DKIM_PERMFAIL(0.00)[mediakraftzone.com]; HAS_X_GMSV(0.00)[rebecca.clark@mediakraftzone.com] X-Rspamd-Server: mx1.freebsd.org X-Spam: Yes Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 16:40:05 -0000 Hi, Hope this Email Finds You Well, I wanted to check if you'd be interested in acquiring Zabbix Users Information? We can help customize the list for any specific Technology users based on your criteria. Let me know if you are interested and I will get back to you with the counts and pricing for your review. Regards, Rebecca Clark Lead Generation Executive To opt out, please reply with Unsubscribe in the Subject Line. From owner-freebsd-arch@freebsd.org Fri Nov 30 18:42:36 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DE9BD114C814 for ; Fri, 30 Nov 2018 18:42:35 +0000 (UTC) (envelope-from plainsmart@paypalnotification.ml) Received: from paypalnotification.ml (unknown [IPv6:2a01:7c8:aac3:2a8:5054:ff:fee2:e697]) by mx1.freebsd.org (Postfix) with ESMTP id 16CAB7071E for ; Fri, 30 Nov 2018 18:42:35 +0000 (UTC) (envelope-from plainsmart@paypalnotification.ml) Received: from paypalnotification.ml (localhost [IPv6:::1]) by paypalnotification.ml (Postfix) with ESMTP id 2C77D14798E for ; Fri, 30 Nov 2018 19:39:54 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; bh=+Ty5/3RuiMhhmYlH/QY6lm7rj2kSO7mufEa3JVA4VQE=; d=paypalnotification.ml; h=Message-ID: Date: Subject: From: To: MIME-Version: Content-Type: Content-Transfer-Encoding; i=@paypalnotification.ml; s=mail; t=1543603194; b=qKDpJP2RdY0Lk18rrTTJl9VYeIIC8LmVx3UmMhidyVOdTtV90TWjWJgj+gWVRGvIf1LyAx8fY dCsNosQINaTRBjCqs9hSZuqB/x6qXpvv+sJ72BJ1SlI+ZMxnitFF0cf9IE+kWAxwijfQsARAL 8tDoCILfzxTJCnpKYoJRHTt+o= Message-ID: <1400162a24f61d10233aa66b9597aa36@paypalnotification.ml> Date: Fri, 30 Nov 2018 19:00:26 +0100 Subject: notice From: plainsmart To: freebsd-arch@freebsd.org X-Rspamd-Queue-Id: 16CAB7071E X-Spamd-Result: default: False [0.14 / 15.00]; ARC_NA(0.00)[]; RDNS_NONE(1.00)[]; R_DKIM_ALLOW(-0.20)[paypalnotification.ml]; NEURAL_HAM_MEDIUM(-0.67)[-0.674,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.64)[-0.639,0]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arch@freebsd.org]; TO_DN_NONE(0.00)[]; R_SPF_SOFTFAIL(0.00)[~all]; RCPT_COUNT_ONE(0.00)[1]; MANY_INVISIBLE_PARTS(0.05)[1]; DKIM_TRACE(0.00)[paypalnotification.ml:+]; DMARC_POLICY_ALLOW(0.00)[paypalnotification.ml,none]; MX_GOOD(-0.01)[cached: paypalnotification.ml]; MIME_HTML_ONLY(0.20)[]; DMARC_POLICY_ALLOW_WITH_FAILURES(-0.50)[]; NEURAL_HAM_SHORT(-0.66)[-0.663,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(-1.02)[ipnet: 2a01:7c8::/32(-2.25), asn: 20857(-2.87), country: NL(0.01)]; ASN(0.00)[asn:20857, ipnet:2a01:7c8::/32, country:NL]; HFILTER_HOSTNAME_UNKNOWN(2.50)[]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-Rspamd-Server: mx1.freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 18:42:36 -0000