Skip to content

Commit

Permalink
Reference insecure connection profile.
Browse files Browse the repository at this point in the history
  • Loading branch information
dkocher committed Feb 9, 2025
1 parent af7b77a commit 986ad0b
Showing 1 changed file with 20 additions and 5 deletions.
25 changes: 20 additions & 5 deletions protocols/smb.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,14 +11,16 @@ SMB
:local:
:::

> [SMB (Server Message Block)](https://en.wikipedia.org/wiki/Server_Message_Block) is used to access Windows File Shares or a Samba Linux Server.
> [SMB (Server Message Block)](https://en.wikipedia.org/wiki/Server_Message_Block) is used to access Windows File Shares
> or a Samba Linux Server.
## Connecting

:::{important}

* Cyberduck [8.7.0](https://cyberduck.io/changelog/) or later required
* Mountain Duck 5.0.0 required (not yet available)
:::
:::

To connect to a SMB server, choose _SMB (Server Message Block)_.

Expand All @@ -29,17 +31,22 @@ To connect to a SMB server, choose _SMB (Server Message Block)_.

### Authentication

Username and password must be provided for authentication using NTLM. The optional domain name defaults to `WORKGROUP` and can be customized as part of the username in the format `REALM\username` in the _Username_ input field when adding a bookmark. Depending on the server setup, this can be
Username and password must be provided for authentication using NTLM. The optional domain name defaults to `WORKGROUP`
and can be customized as part of the username in the format `REALM\username` in the _Username_ input field when adding a
bookmark. Depending on the server setup, this can be

- `COMPUTERNAME\username`
- `NETBIOSDOMAINNAME\username`

The default domain can be set using the [hidden configuration option](../tutorials/hidden_properties.md)

smb.domain.default=WORKGROUP

### Share Name

To connect to a specific share, you can configure a _Path_ in the bookmark. When omitted an attempt is made to list all available shares from the server. On failure retrieving share names from the server, a prompt is displayed to enter the share name when connecting.
To connect to a specific share, you can configure a _Path_ in the bookmark. When omitted an attempt is made to list all
available shares from the server. On failure retrieving share names from the server, a prompt is displayed to enter the
share name when connecting.

:::{image} _images/SMB_Share.png
:alt: SMB Share Input
Expand All @@ -49,12 +56,20 @@ To connect to a specific share, you can configure a _Path_ in the bookmark. When
### Interoperability

SMB protocol support has been tested with connections to the following server implementations

- Windows 2016 Server (`SMB_3_1_1` dialect)
- Windows 2022 Server (`SMB_3_1_1` dialect)
- Linux Samba (`SMB_3_1_1` dialect)
- macOS 13.5 (22G74) (`SMB_3_0_2` dialect)
- SMB [Azure file shares](https://learn.microsoft.com/en-us/azure/storage/files/files-smb-protocol)

### Encryption

By default, SMB connections are secured by signing and encrypting requests when supported by the server using SMBv3.
Alternatively, use the connection profile with support for signing and encryption disabled.

- {download}Install the *SMB (No Encryption) connection profile* from *Preferences… → Profiles*.

### Cyberduck CLI

You can list shares with [Cyberduck CLI](https://duck.sh/) using
Expand Down

0 comments on commit 986ad0b

Please sign in to comment.