Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 27 Nov 2018 19:55:54 +0300
From:      Yuri Pankov <yuripv@yuripv.net>
To:        Edward Napierala <trasz@freebsd.org>, gerard@seibercom.net
Cc:        freebsd-arch@freebsd.org
Subject:   Re: Removal or updating of "mount_smbfs" from FreeBSD operating system
Message-ID:  <a9a10036-9c4c-9aa4-9f64-e34ee8d30e89@yuripv.net>
In-Reply-To: <CAFLM3-o_P3-1sDea-Bgbn0oSjnAqF5RAMTWDgkk6K3819XsMDQ@mail.gmail.com>
References:  <20181126121926.00007626@seibercom.net> <CAFLM3-o_P3-1sDea-Bgbn0oSjnAqF5RAMTWDgkk6K3819XsMDQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--UrapcRYepkm2apszBDy6aYULFTj49EYBM
Content-Type: multipart/mixed; boundary="sQAUzOE4SlYgHLLERgfzsw0iWeAEuoR7p";
 protected-headers="v1"
From: Yuri Pankov <yuripv@yuripv.net>
To: Edward Napierala <trasz@freebsd.org>, gerard@seibercom.net
Cc: freebsd-arch@freebsd.org
Message-ID: <a9a10036-9c4c-9aa4-9f64-e34ee8d30e89@yuripv.net>
Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating
 system
References: <20181126121926.00007626@seibercom.net>
 <CAFLM3-o_P3-1sDea-Bgbn0oSjnAqF5RAMTWDgkk6K3819XsMDQ@mail.gmail.com>
In-Reply-To: <CAFLM3-o_P3-1sDea-Bgbn0oSjnAqF5RAMTWDgkk6K3819XsMDQ@mail.gmail.com>

--sQAUzOE4SlYgHLLERgfzsw0iWeAEuoR7p
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Edward Napierala wrote:
> pon., 26 lis 2018 o 17:20 Gerard Seibert <gerard@seibercom.net> napisa=C5=
=82(a):
>>
>> TO WHOM IT MAY CONCERN
>>
>> The =E2=80=9CSMBv1=E2=80=9D protocol is a security hazard and was depr=
eciated by Microsoft in
>> 2014. There is virtually no use for it anymore.
>>
>> The =E2=80=9Cmount_smbfs=E2=80=9D utility in FreeBSD only uses that pr=
otocol, which results
>> in making it useless with newer versions of Microsoft=E2=80=99s operat=
ing systems, as
>> well as other OS=E2=80=99s that have depreciated the use of SMBv1.
>>
>> I would like to suggest that FreeBSD do one of the following:
>>
>> 1) Remove =E2=80=9Cmount_smbfs=E2=80=9D from FreeBSD. This would proba=
bly be in versions 12.1
>> or 13. It is perhaps too late to get into FreeBSD 12.
>>
>> 2) Update =E2=80=9Cmount_smbfs=E2=80=9D so that it is compatible with =
versions SMBv3 and
>> greater. While "SMBv2" is not dead, it is definitely comatose. This wo=
uld be a
>> better idea if someone had the time to do it.
>=20
> FWIW, I believe SMBv3 is just a set of (largely optional) extensions to=
 SMBv2,
> not an entirely different protocol, like SMBv1 is.  Which means, any ve=
rsion
> that supports v3 is likely to also handle v2.
>=20
> There seems to be existing, working code in Nexenta, which is being
> upstreamed to Illumos:
>=20
> https://www.illumos.org/issues/9735
> https://github.com/illumos/illumos-gate/pull/37
>=20
> Their implementation descends from the one we have in base (and the one=

> from OSX, which also descends from FreeBSD), so it should be possible t=
o
> merge it.

Yes, we have it working and tested pretty well.  And that's exactly the
reason I was asking if there's work in progress for smb2/3 client or not
before even starting looking into porting the code.

The problem here is that the code has grown library dependencies which
are CDDL-licensed, which aren't easy to break (if at all), so if ported,
it will be covered by WITHOUT_CDDL; hopefully that's acceptable.  It's
possible that Nexenta-authored code could be relicensed under BSDL (I'll
have to ask, we already have a precedent with localedef), but sadly that
doesn't cover everything.


--sQAUzOE4SlYgHLLERgfzsw0iWeAEuoR7p--

--UrapcRYepkm2apszBDy6aYULFTj49EYBM
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE+Gq3PsPeLT4tL/9wk4vgf7Eq4WwFAlv9dyEACgkQk4vgf7Eq
4WwDZQf8CxGpwQr5mpKdxoIEk35psjlrfb1tHu4szzl/Gp9T5edpUe3Wl+MPY24l
EP+3dIC11vfYiwFWH8IVc1Rn709bNVWs2e5Bt3oXAnicwwdY45CbscemlM0ENhFT
AsipW8zNlk0RkJ184XqgH1VTZWq3kwUOOz/rnnExWY37InYgGLQLPTmrrMvPPYJn
XXG+mVDFY4sGOBwrH4ftjtpyp8uYoP5RW/4vfBS/whoQ84Q07gCJ8HbFyvT3xAa6
qb2hRvmfgarmpG2U0zbMFk7iWQYtKAM/0h7rYuILDl5XOulgO3yJwWa1Nm2ZuchF
JYIL7q6D4QlkpE1gFbqFxxZZPaGsGw==
=o7cj
-----END PGP SIGNATURE-----

--UrapcRYepkm2apszBDy6aYULFTj49EYBM--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?a9a10036-9c4c-9aa4-9f64-e34ee8d30e89>