Table of Contents
Advertisement
network links. When this property is configured and the preferred domain controller is not
specified, joining an Active Directory domain will prefer domain controllers located in this
site over external domain controllers.
Maximum # of server threads - The maximum number of simultaneous server threads
■
(workers). Default is 1024.
Enable Dynamic DNS - Choose whether the appliance will use Dynamic DNS to update
■
DNS records in the Active Directory domain. Default is off.
Enable oplocks - Choose whether the appliance will grant Opportunistic Locks to SMB
■
clients. This will improve performance for most clients. Default is on. The SMB server
grants an oplock to a client process so that the client can cache data while the lock is in
place. When the server revokes the oplock, the client flushes its cached data to the server.
Restrict anonymous access to share list - If this option is enabled, clients must
■
authenticate to the SMB service before receiving a list of shares. If disabled, anonymous
clients may access the list of shares.
Primary WINS server - Primary WINS address configured in the TCP/IP setup.
■
Secondary WINS server - Secondary WINS address configured in the TCP/IP setup.
■
Excluded IP addresses from WINS - IP addresses excluded from registration with WINS.
■
LAN Manager compatibility level - Authentication modes supported (LM, NTLM, LMv2,
■
NTLMv2). For more information on the supported authentication modes within each
compatibility level, consult the Oracle Solaris Information Library for smb. NTLMv2 is the
recommended minimum security level to avoid publicly known security vulnerabilities.
SMB signing enabled - Enables interoperability with SMB clients using the SMB signing
■
feature. If a packet has been signed, the signature will be verified. If a packet has not been
signed it will be accepted without signature verification (if SMB signing is not required -
see below).
SMB signing required - When SMB signing is required, all SMB packets must be signed
■
or they will be rejected, and clients that do not support signing will be unable to connect to
the server.
Ignore zero VC - When an SMB client establishes a new connection, it may request that
■
the appliance clean up all previous connections and file locks from this client by specifying
a Virtual Circuit (VC) number of zero. This protocol artifact however, does not respect
network address translation (NAT) for clients or multiple DNS entries assigned to the same
host. In combination, zero VC requests between masked or redundant network locations
may result in unrelated active connections being reset. By default, zero VC requests are
honored to prevent stale file locking, however if SMB sessions are being disconnected in
error, ignoring zero VC requests may resolve the issue.
Setting Properties to Export Shares over SMB
Several share properties must be set in certain ways when exporting a share over SMB.
Sharing a Filesystem Over NFS
Appliance Services
245
Advertisement
Table of Contents
