does DAVE11 support SMB2

User discussion forum for DAVE v13
Forum rules
This forum is for user discussion of DAVE, and is not intended as a primary source of technical assistance.
If you require technical support, please contact our Support Specialists at support@thursby.com.
Post Reply
yanhuan
Posts: 1
Joined: Mon Aug 11, 2014 3:35 am

does DAVE11 support SMB2

Post by yanhuan » Mon Aug 11, 2014 3:40 am

hi
if DAVE11 support SMB2? if support, how can I enable it?

thanks

TRIS3CT
Posts: 1
Joined: Thu Aug 28, 2014 10:56 am

Re: does DAVE11 support SMB2

Post by TRIS3CT » Thu Aug 28, 2014 10:57 am

I would like to know this too...

Actually, I hope it's using SMB3.

jim_t
Site Admin
Posts: 344
Joined: Wed Feb 23, 2011 5:10 pm

Re: does DAVE11 support SMB2

Post by jim_t » Thu Aug 28, 2014 11:25 am

DAVE does not use SMB2.

When Microsoft introduced the changes to Windows networking that they called SMB2, we did extensive testing with DAVE to try and implement them. At no point was there any improvement in copy speed, so we decided to continue using the same optimized connection methods we have used for nearly 18 years without sacrificing stability or file integrity.

At this time, there are no plans to implement any changes to DAVE's CIFS.

---
Jim

Dogstar
Posts: 2
Joined: Sat May 20, 2017 11:36 am

Re: does DAVE11 support SMB2

Post by Dogstar » Sat May 20, 2017 11:40 am

Since WannaCry Microsoft recommends to disable SMB1. I think now you have to consider to switch to SMB3 because DAVE is useless otherwise.

carl
Site Admin
Posts: 178
Joined: Wed Feb 23, 2011 5:04 pm
Location: Arlington, Texas
Contact:

Re: does DAVE11 support SMB2

Post by carl » Wed May 24, 2017 8:44 am

ADmitMac PKI, ADmitMac, and DAVE all use the same CIFS ‘backbone’, using our time tested method of connecting to Windows shares. Though there have been a few security concerns as of late that have prompted some organizations to simply disable SMB1 entirely, I’ve been led to believe that there aren’t any issues if the servers have been updated with the appropriate patches from Microsoft.

At this time, we do not have any plans to update to SMB2 or higher. Our products will continue to require that SMB1 be enabled on the Windows DCs and fileservers in order to connect to those shares. I apologize in advance for any inconvenience this may cause you.

Carl Ketterling, Thursby Software

Dogstar
Posts: 2
Joined: Sat May 20, 2017 11:36 am

Re: does DAVE11 support SMB2

Post by Dogstar » Thu Jun 01, 2017 11:14 am

But it's only a matter of time that Microsoft won't support SMB1 anymore.

jakefraser
Posts: 2
Joined: Mon Jul 03, 2017 7:02 am

Re: does DAVE11 support SMB2

Post by jakefraser » Mon Jul 03, 2017 7:14 am

Dogstar wrote:But it's only a matter of time that Microsoft won't support SMB1 anymore.
They're already signalling this with some fairly blunt articles such as https://blogs.technet.microsoft.com/fil ... sing-smb1/

Can we as customers using the latest version of DAVE (v13) get some kind of commitment to getting SMB2/3 support via DAVE in the next release? If we can't, we'll have to stop using DAVE altogether as we can't risk the security of having SMB1 enabled on servers for the sake of a minority of devices (Macs running DAVE).

carl
Site Admin
Posts: 178
Joined: Wed Feb 23, 2011 5:04 pm
Location: Arlington, Texas
Contact:

Re: does DAVE11 support SMB2

Post by carl » Tue Jul 04, 2017 9:30 am

ADmitMac and DAVE are mature products, and at this time, we do not have any plans to update them to SMB2 or higher.

jakefraser
Posts: 2
Joined: Mon Jul 03, 2017 7:02 am

Re: does DAVE11 support SMB2

Post by jakefraser » Tue Jul 04, 2017 9:42 am

Carl
I don't think you can excuse a lack of support for a protocol introduced in 2006 due to "maturity" of a product. SMB1 has many known vulnerabilities, and any sysadmin still running SMB1 on their servers by the end of 2017 will be asking for trouble. You're asking sysadmins that have trusted your product to intentionally expose their infrastructure to SMB1 vulnerabilities. You'll lose a lot of customers very soon when every penetration test, security audit and best practice prohibits the use of SMB1 completely.
I think Thursby should be taking this a lot more seriously...

Post Reply