Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION Manual page 35

Parameter
OpLocks (Opportunistic Locking)
Distributed File Services (DFS)
Support
SMB Signature
Enabling and Disabling SMB Signing
SMB signing supports message authentication, which prevents active message attacks. The
authentication is provided by placing a digital signature into each SMB. The digital signature is then
verified by both the client and the server. It can be set to mandatory or optional mode.
To use SMB signing mode, both the client and the server should be enabled for SMB signing. Use
either Optional or Mandatory modes to enable it.
Optional mode: If SMB signing is set to the optional mode (the default mode after enabling it by
using console commands), it automatically detects whether or not individual clients have SMB
signing enabled. If a client does not have SMB signing enabled, the server does not use SMB
signing for client communication. If a client has SMB signing enabled, the server uses SMB signing
for client communication.
Mandatory mode: If you set SMB signing to mandatory mode, all clients must have SMB signing
enabled or they cannot connect to the server. If SMB signing is set as mandatory on the server,
clients cannot establish sessions with the server unless they have SMB signing enabled.
Disable mode: You can disable SMB signing by setting SMB signing to disabled mode.
IMPORTANT: After enabling or disabling SMB signing, or changing the mode to optional or
mandatory, clients must reconnect in order for changes to take effect. For example, if SMB signing
is enabled on the server, SMB signing is not in effect for individual clients until each of those clients
reconnects.
Setting CIFS General Authentication Parameters
On the General page, select Authentication to view or edit the CIFS authentication parameters.
Description
Improves file access performance. The option is disabled by
default.
This option allows Distributed File Services support in CIFS. The
option is disabled by default.
By default, this is set to Optional. Select Mandatory or Optional or
Disabled. For details, see "Enabling and Disabling SMB Signing"
on page 35.
Administering the CIFS Server 35