Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

How to disable SMB1 & enable SMB2

If none of the specific sub-forums seem right for your thread, ask here.
Post Reply
Message
Author
berzo84
Posts: 10
Joined: 2017-08-21 04:29

How to disable SMB1 & enable SMB2

#1 Post by berzo84 »

Hi,

I have inherited a Debian server running the following -

Distributor ID: Debian
Description: Debian GNU/Linux 6.0.7 (squeeze)
Release: 6.0.7
Codename: squeeze

Can anyone help me with disabling SMB1 and enabling SMB2 on this server.

I know i have to modify the the smb.conf file. But this file doesn't match some of the examples I see on the web.

Maybe my Debian is too old.

Thanks

deborah-and-ian
Posts: 182
Joined: 2016-07-13 08:40

Re: How to disable SMB1 & enable SMB2

#2 Post by deborah-and-ian »

Running any server with an OS that receives no security updates is mayhem.
Debian GNU/Linux 9 Stretch w/Openbox

Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#3 Post by berzo84 »

deborah-and-ian wrote:Running any server with an OS that receives no security updates is mayhem.
I tend to agree.....this is what I have to work with in a hurry.

I've just started a new job and am 4 weeks in. This server was part of the package.

Any assistance with the SMB issue?

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#4 Post by berzo84 »

I have tried the following change to the smb.conf file –

#======================= Global Settings =======================

[global]

# Change SMB to v2
min protocol = SMB2


I restarted the samba service after this.....but still wont work.

I think my samba version is too old to support SMB2.

samba 2:3.5.6~dfsg-3squeeze9

I have tried to update with the following

sudo apt-get upgrade samba

but this fails -

Install these packages without verification [y/N]? y
Err http://security.debian.org/ squeeze/updates/main dpkg amd64 1.15.11
404 Not Found
Err http://security.debian.org/ squeeze/updates/main linux-base all 2.6.32-48squeeze6
404 Not Found


How can i get this apt get working right?

Thanks

kedaha
Posts: 3521
Joined: 2008-05-24 12:26
Has thanked: 33 times
Been thanked: 77 times

Re: How to disable SMB1 & enable SMB2

#5 Post by kedaha »

deborah-and-ian wrote:Running any server with an OS that receives no security updates is mayhem.
Hello,

Indeed it is; not only it receives no security updates but "squeeze" is absolutely obsolete so there's no way to "disable SMB1 & enable SMB2."

The only way to proceed is to upgrade —you cannot jump a release or releases— at least to Debian 7 but it'll be quite a long path if the objective is to upgrade to current stable: 6.0 "squeeze" -> 7 "wheezy" ->8 "jessie" -> 9 "stretch". And further upgrades are done in the same way.

Read the wheezy/releasenotes

You need to check to see that the "squeeze" /etc/apt/sources.list doesn't contain anything it shouldn't before modifying it to accordingly for the upgrade.
Last edited by kedaha on 2017-08-21 07:44, edited 1 time in total.
DebianStable

Code: Select all

$ vrms

No non-free or contrib packages installed on debian!  rms would be proud.

User avatar
dilberts_left_nut
Administrator
Administrator
Posts: 5346
Joined: 2009-10-05 07:54
Location: enzed
Has thanked: 12 times
Been thanked: 66 times

Re: How to disable SMB1 & enable SMB2

#6 Post by dilberts_left_nut »

A quick search turns up this:
https://wiki.samba.org/index.php/Samba3/SMB2
saying smb2 support was introduced in samba 3.6, so you'll need to upgrade to wheezy first.

To do that, you'll first need to make sure your squeeze system is fully updated, by pointing your sources to the archives as it has been EOL for a while now.

https://www.debian.org/distrib/archive

Then upgrade to wheezy like so:
https://www.debian.org/releases/wheezy/releasenotes
AdrianTM wrote:There's no hacker in my grandma...

kedaha
Posts: 3521
Joined: 2008-05-24 12:26
Has thanked: 33 times
Been thanked: 77 times

Re: How to disable SMB1 & enable SMB2

#7 Post by kedaha »

The wheezy /etc/apt sources.list should look like this prior to the upgrade:

Code: Select all

deb http://ftp.us.debian.org/debian/ wheezy main 
deb-src http://ftp.us.debian.org/debian/ wheezy main 
deb http://ftp.debian.org/debian/ wheezy-updates main
deb http://security.debian.org/ wheezy/updates main
Unless you include contrib and nonfree as well.
DebianStable

Code: Select all

$ vrms

No non-free or contrib packages installed on debian!  rms would be proud.

deborah-and-ian
Posts: 182
Joined: 2016-07-13 08:40

Re: How to disable SMB1 & enable SMB2

#8 Post by deborah-and-ian »

And purge any packages that are not from official Squeeze, otherwise the upgrade will fail. Just saying.
Debian GNU/Linux 9 Stretch w/Openbox

Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#9 Post by berzo84 »

Experts - Really appreciate the prompt advice!

So upgrade to Wheezy from there I can upgrade Samba to 3.6 which is SMB2 compatible.

I'm concerned with this server as it is running some custom application that has been left in the corner for years.

I have a VM snapshot and will be attempting the upgrade.

Will follow the instructions posted here.

deborah-and-ian
Posts: 182
Joined: 2016-07-13 08:40

Re: How to disable SMB1 & enable SMB2

#10 Post by deborah-and-ian »

berzo84 wrote: I'm concerned with this server as it is running some custom application that has been left in the corner for years.
Upgrade instructions from Squeeze to Wheezy
Debian GNU/Linux 9 Stretch w/Openbox

Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#11 Post by berzo84 »

Well I had a crack at the upgrade......few warnings and a couple of errors.

Seemed to go through a fair bit.

I gave it a restart and it seems the network interfaces are missing.

Pings don't respond....I run ifconfig and it doesn't return anything.

Any ideas?

Thanks

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#12 Post by berzo84 »

Okay I ran into this error -

ifup: failed to open statefile /run/network/ifstate: No such file or directory

I ran this and the interfaces came back -

# mkdir /run/network
# ifup lo

Sorry this is probably painful for you all......as you can tell I stuggle with Linux.

Running further tests on the system now.

**UPDATE - Seems like I have to run this command after every reboot. Anyone know how to make this stick?

deborah-and-ian
Posts: 182
Joined: 2016-07-13 08:40

Re: How to disable SMB1 & enable SMB2

#13 Post by deborah-and-ian »

berzo84 wrote:Okay I ran into this error -

ifup: failed to open statefile /run/network/ifstate: No such file or directory

I ran this and the interfaces came back -

# mkdir /run/network
# ifup lo

Sorry this is probably painful for you all......as you can tell I stuggle with Linux.

Running further tests on the system now.

**UPDATE - Seems like I have to run this command after every reboot. Anyone know how to make this stick?
I really suggest reading Aoki's Debian Reference Manual. It has everything you need. With regards to your current problem, I assume you just have to enter the ethernet connection into /etc/network/interfaces .
https://wiki.debian.org/NetworkConfiguration
Debian GNU/Linux 9 Stretch w/Openbox

Acer Aspire E5-521G
AMD A8-6410 APU
4 GB RAM
integrated AMD Mullins
dedicated AMD Hainan Radeon R5 M240 2 GB
240 GB Toshiba Q300 SSD
Realtek RTL8111/8168/8411 ethernet
Qualcomm Atheros QCA9565 wireless

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#14 Post by berzo84 »

Okay so got past the network interface error by running an apt-get update. Packages updated and got it back on the network.

Now when testing the web application that runs on it I get the following -

OperationalError at /vast/

could not connect to server: No such file or directory
Is the server running locally and accepting
connections on Unix domain socket "/var/run/postgresql/.s.PGSQL.5432"?


Anyone got any thoughts on this?

Thanks

User avatar
dilberts_left_nut
Administrator
Administrator
Posts: 5346
Joined: 2009-10-05 07:54
Location: enzed
Has thanked: 12 times
Been thanked: 66 times

Re: How to disable SMB1 & enable SMB2

#15 Post by dilberts_left_nut »

berzo84 wrote:Anyone got any thoughts on this?
Nothing you want to hear ... :)

Presumably this is your "custom app"?
Does it have a list of instructions or special requiremnts (versions of supporting software etc)?

Have you now completed the upgrade to wheezy successfully?(seems you hadn't prior to your last post).
AdrianTM wrote:There's no hacker in my grandma...

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#16 Post by berzo84 »

dilberts_left_nut wrote:
berzo84 wrote:Anyone got any thoughts on this?
Nothing you want to hear ... :)

Presumably this is your "custom app"?
Does it have a list of instructions or special requiremnts (versions of supporting software etc)?

Have you now completed the upgrade to wheezy successfully?(seems you hadn't prior to your last post).
Yeah spot on this is the custom app.......

I did get it to wheezy, got it back on the network.

But it seemed I couldn't get the postgresql service to start.

It was running 2 x version s of postgresql after the upgrade and or apt-get update.

postgresql-8.3
postgresql-9.2

I also believe what you are saying is correct.....the custom app will most definitely have dependencies that are reliant on specific software versions.

.....But I guess as we all know this is waaaaay beyond my skill level on Linux.

I've had a crack but it seems like this will be really hard for me to upgrade the server and keep the custom app running.

As of now I've had to revert back the snapshot to the old version.

Appreciate everyone help. I believe this is the end of the road.

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#17 Post by berzo84 »

lol I am taking another look at this......I am on Wheezy now.

Seems like I cant get the postgres database server running.

Anyone know how I can get this going?

i have tired the following -

sudo /etc/init.d/postgresql start

But seems like it won't work

service --status-all

[ - ] postgresql

berzo84
Posts: 10
Joined: 2017-08-21 04:29

Re: How to disable SMB1 & enable SMB2

#18 Post by berzo84 »

Okay so seems like there were 2 x versions of postgres on the server.

8.3 & 9.2

I removed 8.3 prior to upgrade........still didn't help.

Next I held postgres 9.2 from being changed as part of the upgrade.

echo postgresql-9.2 hold | dpkg --set-selections
echo postgresql-server-dev-9.2 hold | dpkg --set-selections

The custom app seemed to work after the upgrade........

Checking over the server now, im sure ill be into the next hurdle :)

Post Reply