From owner-freebsd-arch@freebsd.org Mon Nov 26 18:10:49 2018 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D3F25113F126 for ; Mon, 26 Nov 2018 18:10:48 +0000 (UTC) (envelope-from bapt@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5ED388082B; Mon, 26 Nov 2018 18:10:48 +0000 (UTC) (envelope-from bapt@FreeBSD.org) Received: from ivaldir.etoilebsd.net (etoilebsd.net [178.32.217.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: bapt) by smtp.freebsd.org (Postfix) with ESMTPSA id 25ED812416; Mon, 26 Nov 2018 18:10:48 +0000 (UTC) (envelope-from bapt@FreeBSD.org) Received: by ivaldir.etoilebsd.net (Postfix, from userid 1001) id F07C933848; Mon, 26 Nov 2018 19:10:46 +0100 (CET) Date: Mon, 26 Nov 2018 19:10:46 +0100 From: Baptiste Daroussin To: Miroslav Lachman <000.fbsd@quip.cz> Cc: Gerard Seibert , freebsd-arch@freebsd.org Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system Message-ID: <20181126181046.6ofproezdd6hgvdl@ivaldir.net> References: <20181126121926.00007626@seibercom.net> <992c395a-d29e-3f71-9750-b0cbdf2761f4@quip.cz> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="3nsh2bh75xzawlho" Content-Disposition: inline In-Reply-To: <992c395a-d29e-3f71-9750-b0cbdf2761f4@quip.cz> User-Agent: NeoMutt/20180716 X-Rspamd-Queue-Id: 5ED388082B X-Spamd-Result: default: False [1.51 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_SPAM_LONG(0.73)[0.733,0]; NEURAL_SPAM_MEDIUM(0.48)[0.475,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US]; NEURAL_SPAM_SHORT(0.31)[0.306,0] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 18:10:49 -0000 --3nsh2bh75xzawlho Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Nov 26, 2018 at 06:57:32PM +0100, Miroslav Lachman wrote: > Gerard Seibert wrote on 2018/11/26 18:19: > > TO WHOM IT MAY CONCERN > >=20 > > The =E2=80=9CSMBv1=E2=80=9D protocol is a security hazard and was depre= ciated by Microsoft in > > 2014. There is virtually no use for it anymore. > >=20 > > The =E2=80=9Cmount_smbfs=E2=80=9D utility in FreeBSD only uses that pro= tocol, which results > > in making it useless with newer versions of Microsoft=E2=80=99s operati= ng systems, as > > well as other OS=E2=80=99s that have depreciated the use of SMBv1. > >=20 > > I would like to suggest that FreeBSD do one of the following: > >=20 > > 1) Remove =E2=80=9Cmount_smbfs=E2=80=9D from FreeBSD. This would probab= ly be in versions 12.1 > > or 13. It is perhaps too late to get into FreeBSD 12. > >=20 > > 2) Update =E2=80=9Cmount_smbfs=E2=80=9D so that it is compatible with v= ersions SMBv3 and > > greater. While "SMBv2" is not dead, it is definitely comatose. This wou= ld be a > > better idea if someone had the time to do it. > >=20 > > Thank you for taking the time to read this suggestion. >=20 > Is there any working (production ready) alternative in ports tree? > We are in heterogenous environment and some of our servers have more than= 10 > SMB shares mounted by mount_smbfs. >=20 There are some fuse based alternative yes: fusefs-smbnetfs Best regards, Bapt --3nsh2bh75xzawlho Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEgOTj3suS2urGXVU3Y4mL3PG3PloFAlv8NyQACgkQY4mL3PG3 PlpuBQ//cEo1MP+HnaV9ijFufp8a/rWMczMTRUv3t0xRXlYwMGVFJ0ZUBSkW0/4a yHPC5QGeotnj3Xzr2xNr1IjBfPWRt7GBu9XEogwWRWo3aRYkSLWlaZ1Vk5iOkC5P f8AXiAVL6XEVWIDSzAwmy8HhqpURe1CijB7bumLVbuca/2K3A3rOB0a0DVfXXQX/ ItSQ3+mB+6d1RMwkVevhmdgYWlZt0nc38yfmmMEA8RuU5XLIWvL12zaxZWsvMMCf 0v5uJws6UZdLHuk62kG67E1yTKaiXwT2NO1NU6ji/aIyQyOkkP6zv35PX5JCHdQ6 gX8DobgLZwYmvaPGBfuq8CfijR9/dXFCxmyoHbqtzElh2Tu+SPRm3tglY/gT0nMx jXreZWzwSL3tT5LoGx7/l88Y7exfxpEMKNeW3xKX23J+HTgMvYLMeTuGN3AEnrCc UfVmZ5tyAggbHfQQ7qTarPeCBugzqXZLO9tjDpeFPWgMIpBwv5YTGzG2vgae2IYJ MUYrR3OetUf6M+53ectLT8rt+uAmrpucKcxCf4LWo2iu1AM+v+jyBdM97f+9+fsY tskXXG1EiWSEOXyWwIJMdgu6sJCTDKp8KVBjVQtUbsL5uR3iUy1hJxZ/4B7G8OGu EnVzrW6nMn+MSixu83ewkeWxB1jeu9LMBUhxaftbH6jTkLZn3X8= =kwkk -----END PGP SIGNATURE----- --3nsh2bh75xzawlho--