Comment 28 for bug 1767454

Revision history for this message
In , Nate-b (nate-b) wrote :

Migrating information from a duped bug:

The SMB1 protocol is deprecated and Microsoft strongly urges people not to use it. Windows 2016 server does not support it, and Windows 10 only supports it if it's used within the first 15 days (!). It's clearly not going to work in the future. [1]

Ubuntu 18.04 ships with Samba 4.7.6, which uses SMB2 by default.

Network discovery is provided by the SMB1 protocol. [2]

In SMB2 and later, network discovery has to be provided by a separate protocol, WS-Discovery.

There doesn't seem to be any Linux support for WS-Discovery, either in the Samba project or elsewhere[3]

The Smbtree command line tool intelligently downgrades itself to using the old SMB1 version for the purposes of browsing.[4] Connections are actually made using the newer, more secure version. libsamba (the actual library that we use) does not have the same behavior.

---

Distros have been left with two bad options: stay with the insecure and deprecated SMB1 protocol to preserve the network discovery feature for many (but not all) SMB resources, or move to the secure and supported version of the SMB protocol and lose network discovery for all SMB resources. Ubuntu and OpenSUSE chose the latter.

You can make the other choice for yourself by adding "client max version = NT" to /etc/samba/smb.conf.

---

KDE's options are as follows:
1. Wait for Samba to support the newer WS-Discovery protocol for browsing
2. Implement WS-Discovery support ourselves, perhaps taking inspiration or re-using an existing approach. [5][6]

[1] https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/
[2] https://dev.solus-project.com/T1223#91845
[3] https://dev.solus-project.com/T1223#92389
[4] https://bugzilla.samba.org/show_bug.cgi?id=12876#c2
[5] https://nmap.org/nsedoc/scripts/wsdd-discover.html
[6] http://www.dankulp.com/blog/2013/05/apache-cxf-and-ws-discovery/