Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230
How to disable SMB1 & enable SMB2
How to disable SMB1 & enable SMB2
Hi,
I have inherited a Debian server running the following -
Distributor ID: Debian
Description: Debian GNU/Linux 6.0.7 (squeeze)
Release: 6.0.7
Codename: squeeze
Can anyone help me with disabling SMB1 and enabling SMB2 on this server.
I know i have to modify the the smb.conf file. But this file doesn't match some of the examples I see on the web.
Maybe my Debian is too old.
Thanks
I have inherited a Debian server running the following -
Distributor ID: Debian
Description: Debian GNU/Linux 6.0.7 (squeeze)
Release: 6.0.7
Codename: squeeze
Can anyone help me with disabling SMB1 and enabling SMB2 on this server.
I know i have to modify the the smb.conf file. But this file doesn't match some of the examples I see on the web.
Maybe my Debian is too old.
Thanks
-
- Posts: 182
- Joined: 2016-07-13 08:40
Re: How to disable SMB1 & enable SMB2
Running any server with an OS that receives no security updates is mayhem.
Debian GNU/Linux 9 Stretch w/Openbox
Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless
Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless
Re: How to disable SMB1 & enable SMB2
I tend to agree.....this is what I have to work with in a hurry.deborah-and-ian wrote:Running any server with an OS that receives no security updates is mayhem.
I've just started a new job and am 4 weeks in. This server was part of the package.
Any assistance with the SMB issue?
Re: How to disable SMB1 & enable SMB2
I have tried the following change to the smb.conf file –
#======================= Global Settings =======================
[global]
# Change SMB to v2
min protocol = SMB2
I restarted the samba service after this.....but still wont work.
I think my samba version is too old to support SMB2.
samba 2:3.5.6~dfsg-3squeeze9
I have tried to update with the following
sudo apt-get upgrade samba
but this fails -
Install these packages without verification [y/N]? y
Err http://security.debian.org/ squeeze/updates/main dpkg amd64 1.15.11
404 Not Found
Err http://security.debian.org/ squeeze/updates/main linux-base all 2.6.32-48squeeze6
404 Not Found
How can i get this apt get working right?
Thanks
#======================= Global Settings =======================
[global]
# Change SMB to v2
min protocol = SMB2
I restarted the samba service after this.....but still wont work.
I think my samba version is too old to support SMB2.
samba 2:3.5.6~dfsg-3squeeze9
I have tried to update with the following
sudo apt-get upgrade samba
but this fails -
Install these packages without verification [y/N]? y
Err http://security.debian.org/ squeeze/updates/main dpkg amd64 1.15.11
404 Not Found
Err http://security.debian.org/ squeeze/updates/main linux-base all 2.6.32-48squeeze6
404 Not Found
How can i get this apt get working right?
Thanks
Re: How to disable SMB1 & enable SMB2
Hello,deborah-and-ian wrote:Running any server with an OS that receives no security updates is mayhem.
Indeed it is; not only it receives no security updates but "squeeze" is absolutely obsolete so there's no way to "disable SMB1 & enable SMB2."
The only way to proceed is to upgrade —you cannot jump a release or releases— at least to Debian 7 but it'll be quite a long path if the objective is to upgrade to current stable: 6.0 "squeeze" -> 7 "wheezy" ->8 "jessie" -> 9 "stretch". And further upgrades are done in the same way.
Read the wheezy/releasenotes
You need to check to see that the "squeeze" /etc/apt/sources.list doesn't contain anything it shouldn't before modifying it to accordingly for the upgrade.
Last edited by kedaha on 2017-08-21 07:44, edited 1 time in total.
DebianStable
Code: Select all
$ vrms
No non-free or contrib packages installed on debian! rms would be proud.
- dilberts_left_nut
- Administrator
- Posts: 5346
- Joined: 2009-10-05 07:54
- Location: enzed
- Has thanked: 12 times
- Been thanked: 66 times
Re: How to disable SMB1 & enable SMB2
A quick search turns up this:
https://wiki.samba.org/index.php/Samba3/SMB2
saying smb2 support was introduced in samba 3.6, so you'll need to upgrade to wheezy first.
To do that, you'll first need to make sure your squeeze system is fully updated, by pointing your sources to the archives as it has been EOL for a while now.
https://www.debian.org/distrib/archive
Then upgrade to wheezy like so:
https://www.debian.org/releases/wheezy/releasenotes
https://wiki.samba.org/index.php/Samba3/SMB2
saying smb2 support was introduced in samba 3.6, so you'll need to upgrade to wheezy first.
To do that, you'll first need to make sure your squeeze system is fully updated, by pointing your sources to the archives as it has been EOL for a while now.
https://www.debian.org/distrib/archive
Then upgrade to wheezy like so:
https://www.debian.org/releases/wheezy/releasenotes
AdrianTM wrote:There's no hacker in my grandma...
Re: How to disable SMB1 & enable SMB2
The wheezy /etc/apt sources.list should look like this prior to the upgrade:
Unless you include contrib and nonfree as well.
Code: Select all
deb http://ftp.us.debian.org/debian/ wheezy main
deb-src http://ftp.us.debian.org/debian/ wheezy main
deb http://ftp.debian.org/debian/ wheezy-updates main
deb http://security.debian.org/ wheezy/updates main
DebianStable
Code: Select all
$ vrms
No non-free or contrib packages installed on debian! rms would be proud.
-
- Posts: 182
- Joined: 2016-07-13 08:40
Re: How to disable SMB1 & enable SMB2
And purge any packages that are not from official Squeeze, otherwise the upgrade will fail. Just saying.
Debian GNU/Linux 9 Stretch w/Openbox
Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless
Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless
Re: How to disable SMB1 & enable SMB2
Experts - Really appreciate the prompt advice!
So upgrade to Wheezy from there I can upgrade Samba to 3.6 which is SMB2 compatible.
I'm concerned with this server as it is running some custom application that has been left in the corner for years.
I have a VM snapshot and will be attempting the upgrade.
Will follow the instructions posted here.
So upgrade to Wheezy from there I can upgrade Samba to 3.6 which is SMB2 compatible.
I'm concerned with this server as it is running some custom application that has been left in the corner for years.
I have a VM snapshot and will be attempting the upgrade.
Will follow the instructions posted here.
-
- Posts: 182
- Joined: 2016-07-13 08:40
Re: How to disable SMB1 & enable SMB2
Upgrade instructions from Squeeze to Wheezyberzo84 wrote: I'm concerned with this server as it is running some custom application that has been left in the corner for years.
Debian GNU/Linux 9 Stretch w/Openbox
Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless
Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless
Re: How to disable SMB1 & enable SMB2
Well I had a crack at the upgrade......few warnings and a couple of errors.
Seemed to go through a fair bit.
I gave it a restart and it seems the network interfaces are missing.
Pings don't respond....I run ifconfig and it doesn't return anything.
Any ideas?
Thanks
Seemed to go through a fair bit.
I gave it a restart and it seems the network interfaces are missing.
Pings don't respond....I run ifconfig and it doesn't return anything.
Any ideas?
Thanks
Re: How to disable SMB1 & enable SMB2
Okay I ran into this error -
ifup: failed to open statefile /run/network/ifstate: No such file or directory
I ran this and the interfaces came back -
# mkdir /run/network
# ifup lo
Sorry this is probably painful for you all......as you can tell I stuggle with Linux.
Running further tests on the system now.
**UPDATE - Seems like I have to run this command after every reboot. Anyone know how to make this stick?
ifup: failed to open statefile /run/network/ifstate: No such file or directory
I ran this and the interfaces came back -
# mkdir /run/network
# ifup lo
Sorry this is probably painful for you all......as you can tell I stuggle with Linux.
Running further tests on the system now.
**UPDATE - Seems like I have to run this command after every reboot. Anyone know how to make this stick?
-
- Posts: 182
- Joined: 2016-07-13 08:40
Re: How to disable SMB1 & enable SMB2
I really suggest reading Aoki's Debian Reference Manual. It has everything you need. With regards to your current problem, I assume you just have to enter the ethernet connection into /etc/network/interfaces .berzo84 wrote:Okay I ran into this error -
ifup: failed to open statefile /run/network/ifstate: No such file or directory
I ran this and the interfaces came back -
# mkdir /run/network
# ifup lo
Sorry this is probably painful for you all......as you can tell I stuggle with Linux.
Running further tests on the system now.
**UPDATE - Seems like I have to run this command after every reboot. Anyone know how to make this stick?
https://wiki.debian.org/NetworkConfiguration
Debian GNU/Linux 9 Stretch w/Openbox
Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless
Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless
Re: How to disable SMB1 & enable SMB2
Okay so got past the network interface error by running an apt-get update. Packages updated and got it back on the network.
Now when testing the web application that runs on it I get the following -
OperationalError at /vast/
could not connect to server: No such file or directory
Is the server running locally and accepting
connections on Unix domain socket "/var/run/postgresql/.s.PGSQL.5432"?
Anyone got any thoughts on this?
Thanks
Now when testing the web application that runs on it I get the following -
OperationalError at /vast/
could not connect to server: No such file or directory
Is the server running locally and accepting
connections on Unix domain socket "/var/run/postgresql/.s.PGSQL.5432"?
Anyone got any thoughts on this?
Thanks
- dilberts_left_nut
- Administrator
- Posts: 5346
- Joined: 2009-10-05 07:54
- Location: enzed
- Has thanked: 12 times
- Been thanked: 66 times
Re: How to disable SMB1 & enable SMB2
Nothing you want to hear ...berzo84 wrote:Anyone got any thoughts on this?
Presumably this is your "custom app"?
Does it have a list of instructions or special requiremnts (versions of supporting software etc)?
Have you now completed the upgrade to wheezy successfully?(seems you hadn't prior to your last post).
AdrianTM wrote:There's no hacker in my grandma...
Re: How to disable SMB1 & enable SMB2
Yeah spot on this is the custom app.......dilberts_left_nut wrote:Nothing you want to hear ...berzo84 wrote:Anyone got any thoughts on this?
Presumably this is your "custom app"?
Does it have a list of instructions or special requiremnts (versions of supporting software etc)?
Have you now completed the upgrade to wheezy successfully?(seems you hadn't prior to your last post).
I did get it to wheezy, got it back on the network.
But it seemed I couldn't get the postgresql service to start.
It was running 2 x version s of postgresql after the upgrade and or apt-get update.
postgresql-8.3
postgresql-9.2
I also believe what you are saying is correct.....the custom app will most definitely have dependencies that are reliant on specific software versions.
.....But I guess as we all know this is waaaaay beyond my skill level on Linux.
I've had a crack but it seems like this will be really hard for me to upgrade the server and keep the custom app running.
As of now I've had to revert back the snapshot to the old version.
Appreciate everyone help. I believe this is the end of the road.
Re: How to disable SMB1 & enable SMB2
lol I am taking another look at this......I am on Wheezy now.
Seems like I cant get the postgres database server running.
Anyone know how I can get this going?
i have tired the following -
sudo /etc/init.d/postgresql start
But seems like it won't work
service --status-all
[ - ] postgresql
Seems like I cant get the postgres database server running.
Anyone know how I can get this going?
i have tired the following -
sudo /etc/init.d/postgresql start
But seems like it won't work
service --status-all
[ - ] postgresql
Re: How to disable SMB1 & enable SMB2
Okay so seems like there were 2 x versions of postgres on the server.
8.3 & 9.2
I removed 8.3 prior to upgrade........still didn't help.
Next I held postgres 9.2 from being changed as part of the upgrade.
echo postgresql-9.2 hold | dpkg --set-selections
echo postgresql-server-dev-9.2 hold | dpkg --set-selections
The custom app seemed to work after the upgrade........
Checking over the server now, im sure ill be into the next hurdle
8.3 & 9.2
I removed 8.3 prior to upgrade........still didn't help.
Next I held postgres 9.2 from being changed as part of the upgrade.
echo postgresql-9.2 hold | dpkg --set-selections
echo postgresql-server-dev-9.2 hold | dpkg --set-selections
The custom app seemed to work after the upgrade........
Checking over the server now, im sure ill be into the next hurdle