The following GPO was linked to all computers last night: Bureau Enterprise Configurations – SMB 1.0 Disable
If sites are experiencing issues with SAMBA shares on their UNIX servers, they are reminded to use the following guidance to switch their servers to SMB 2.0:
To: All WRD SAs (GS-W SA All)
From: Sun TAC
Date: June 28, 2017
Subject: UPDATE: Samba Protocol SMBv2
o Update Samba Protocol SMBv2
This All-SA email is an update to the following all-SA
email sent on March 3, 2017.
http://unix.usgs.gov/solaris/sa_notes/disnote.170303
Recently a GPO disabling SMBv1 has been applied at the USGS
level. The previous all-SA email had sites enable SMBv2
in preparation for this change. The following update
goes a step further and has sites disable SMBv1 in samba
on Solaris servers. Verify the /etc/samba/smb.conf
configuration file has the folloiwng max and min
protocol settings. If either or both are missing
add them in the “global” section and disable/enable
samba.
## Enable support for SMBv2, disable support for SMBv1.
min protocol = SMB2
max protocol = SMB2
Refresh the samba service and restart it.
svcadm refresh samba
svcadm restart samba
NOTE: If any users are experiencing problems accessing samba
shares have them remove and re-create their drive mapping.
Please email GS-W help sun with questions.
