{"id":3541,"date":"2023-12-17T18:24:10","date_gmt":"2023-12-17T09:24:10","guid":{"rendered":"http:\/\/192.168.20.1\/?p=3541"},"modified":"2023-12-19T20:39:12","modified_gmt":"2023-12-19T11:39:12","slug":"truenas-scale-service-smb","status":"publish","type":"post","link":"https:\/\/rlab.cavtime.net\/?p=3541","title":{"rendered":"[TrueNAS Scale] Service SMB"},"content":{"rendered":"<h2>Overview<\/h2>\n<p><span>SMB Service \u306e\u8a2d\u5b9a\u9805\u76ee\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/span><\/p>\n<h2>Reference<\/h2>\n<h2>Environment<\/h2>\n<p><span>TrueNAS Scale 23.10.0.1<\/span><\/p>\n<h2>Service SMB Configuration<\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Service_SMB_01s.png\" alt=\"\" width=\"900\" height=\"707\" class=\"img-responsive right-block\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Service_SMB_02s.png\" alt=\"\" width=\"900\" height=\"707\" class=\"img-responsive right-block\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Service_SMB_03s.png\" alt=\"\" width=\"900\" height=\"1445\" class=\"img-responsive right-block\" \/><\/p>\n<h3>NetBIOS<\/h3>\n<p><strong>NetBIOS Name<\/strong><\/p>\n<blockquote><p>Automatically populated with the original hostname of the system. This name is limited to 15 characters and cannot be the Workgroup name.<\/p><\/blockquote>\n<ul>\n<li>truenas \/ default<\/li>\n<\/ul>\n<p><strong>NetBIOS Alias<\/strong><\/p>\n<blockquote><p>Enter any aliases, separated by spaces. Each alias can be up to 15 characters long.<\/p><\/blockquote>\n<p><strong>Workgroup<\/strong><\/p>\n<blockquote><p><span>Must match Windows workgroup name. When this is unconfigured and Active Directory or LDAP are active, TrueNAS will detect and set the correct workgroup from these services.<\/span><\/p><\/blockquote>\n<ul>\n<li>WORKGROUP \/ default<\/li>\n<\/ul>\n<p><strong>Description<\/strong><\/p>\n<blockquote><p><span>Optional. Enter a server description.<\/span><\/p><\/blockquote>\n<ul>\n<li>TrueNAS Server \/ default<\/li>\n<\/ul>\n<p><strong>Enable SMB1 support<\/strong><\/p>\n<blockquote><p>Use this option to allow legacy SMB clients to connect to the server. Note that SMB1 is being deprecated and it is advised to upgrade clients to operating system versions that support modern versions of the SMB protocol.<\/p><\/blockquote>\n<ul>\n<li>Unchecked \/ default<\/li>\n<\/ul>\n<p><strong>NTLMv1 Auth<\/strong><\/p>\n<blockquote><p>Off by default. When set, smbd(8) attempts to authenticate users with the insecure and vulnerable NTLMv1 encryption. This setting allows backward compatibility with older versions of Windows, but is not recommended and should not be used on untrusted networks.<\/p><\/blockquote>\n<ul>\n<li>Unchecked \/ default<\/li>\n<\/ul>\n<h3>Other Options<\/h3>\n<p><strong>UNIX Charset<\/strong><\/p>\n<blockquote><p>Default is UTF-8 which supports all characters in all languages.<\/p><\/blockquote>\n<ul>\n<li>UTF-8 \/ default<\/li>\n<li>and any others<\/li>\n<\/ul>\n<p><strong>Log Level<\/strong><\/p>\n<blockquote><p>Record SMB service messages up to the specified log level. By default, error and warning level messages are logged.<\/p><\/blockquote>\n<ul>\n<li>None<\/li>\n<li>Minimum \/ default<\/li>\n<li>Normal<\/li>\n<li>Full<\/li>\n<li>Debug<\/li>\n<\/ul>\n<p><strong>Use Syslog Only<\/strong><\/p>\n<blockquote><p>Set to log authentication failures in \/var\/log\/messages instead of the default of \/var\/log\/samba4\/log.smbd.<\/p><\/blockquote>\n<ul>\n<li>Unchecked<\/li>\n<\/ul>\n<p><strong>Local Master<\/strong><\/p>\n<blockquote><p>Set to determine if the system participates in a browser election. Leave unset when the network contains an AD or LDAP server, or when Vista or Windows 7 machines are present.<\/p><\/blockquote>\n<ul>\n<li>Checked<\/li>\n<\/ul>\n<p><strong>Enable Apple SMB2\/3 Protocol Extensions<\/strong><\/p>\n<blockquote><p><span>These\u00a0<\/span><a href=\"https:\/\/support.apple.com\/en-us\/HT210803\" target=\"_blank\" rel=\"noopener\">protocol extensions<\/a><span>\u00a0can be used by macOS to improve the performance and behavioral characteristics of SMB shares. This is required for Time Machine support.<\/span><\/p><\/blockquote>\n<ul>\n<li>Unchecked<\/li>\n<\/ul>\n<p><strong>Multichannel<\/strong><\/p>\n<blockquote><p><span>SMB multichannel allows servers to use multiple network connections simultaneously by combining the bandwidth of several network interface cards (NICs) for better performance. SMB multichannel does not function if you combine NICs into a LAGG.\u00a0<\/span><a href=\"https:\/\/www.truenas.com\/docs\/scale\/scaletutorials\/shares\/smb\/smbmultichannel\/\" target=\"_blank\" rel=\"noopener\">Read more in docs<\/a><\/p><\/blockquote>\n<ul>\n<li>Unchecked<\/li>\n<\/ul>\n<p><strong>Administrators Group<\/strong><\/p>\n<blockquote><p>Members of this group are local admins and automatically have privileges to take ownership of any file in an SMB share, reset permissions, and administer the SMB server through the Computer Management MMC snap-in.<\/p><\/blockquote>\n<p><strong>Guest Account<\/strong><\/p>\n<blockquote><p><span>Account to be used for guest access. Default is\u00a0<\/span><i>nobody<\/i><span>. The chosen account is required to have permissions to the shared pool or dataset. To adjust permissions, edit the dataset Access Control List (ACL), add a new entry for the chosen guest account, and configure the permissions in that entry. If the selected\u00a0<\/span><i>Guest Account<\/i><span>\u00a0is deleted the field resets to\u00a0<\/span><i>nobody<\/i><span>.<\/span><\/p><\/blockquote>\n<ul>\n<li>nobody \/ default<\/li>\n<li>and any others<\/li>\n<\/ul>\n<p><strong>File Mask<\/strong><\/p>\n<blockquote><p>Overrides default file creation mask of 0666 which creates files with read and write access for everybody.<\/p><\/blockquote>\n<p><strong>Directory Mask<\/strong><\/p>\n<blockquote><p>Overrides default directory creation mask of 0777 which grants directory read, write and execute access for everybody.<\/p><\/blockquote>\n<p><strong>Bind IP Addresses<\/strong><\/p>\n<blockquote><p>Static IP addresses which SMB listens on for connections. Leaving all unselected defaults to listening on all active interfaces.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Overview SMB Service \u306e\u8a2d\u5b9a\u9805\u76ee\u3092\u78ba\u8a8d\u3059\u308b\u3002 Reference Environment TrueNAS Scale 23.10.0.1 Service SMB Configuration NetBI [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[74],"tags":[],"class_list":["post-3541","post","type-post","status-publish","format-standard","hentry","category-nas"],"_links":{"self":[{"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/posts\/3541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3541"}],"version-history":[{"count":7,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/posts\/3541\/revisions"}],"predecessor-version":[{"id":3559,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/posts\/3541\/revisions\/3559"}],"wp:attachment":[{"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3541"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}