mount SMBFS SMB CIFS Server Message Block (SMB), Internet File System

nsmb.conf

Configuration hierarchy is made up of sections, parameters and values.

Sections begin with a section name enclosed within square brackets:
[section_name]

Section names:


    [default]
     
[SERVER]
     
[SERVER:User]
     
[SERVER:User:share]

and may contain key = value lines.

`Keyword`	Section
	`d S U s`
`addr`	`- S - -`	IP address of the SMB server
`dos charsets`	`d - - -`	DOS charset
`nbns`	`d S - -`	address of NetBIOS name server (WINS)
`nbscope`	`d S - -`	NetBIOS scope
`nbtimeout`	`d S - -`	timeout for NetBIOS name servers
`port445`	`d S - -`	SMB TCP/UDP ports
`minauth=a`	`d S - -`	minimum authentication level allowed
`streams`	`d S - -`	use NTFS Streams if supported by the server
`soft`	`d S - -`	Make the mount soft. Fail file system calls after `n seconds.`
`notify_off`	`d S - -`	Turn off notifications
`domain`	`d S U s`	domain name to use when logging into the server.

minimum authentication levels

`kerberos`	Other authications are not attempted.
`ntlmv2`	Kerberos authentication is attempted if a Kerberos token can be obtained, otherwise NTLMv2 authentication is attempted; if the server doesn't support encrypted passwords, the authentication fails.
`ntlm`	Kerberos authentication is attempted … NTLMv2 authentication is attempted and, if that fails, NTLMv1 authentication is attempted, with zeroes in the LM hash; if the server doesn't support encrypted passwords, the authentication fails.
`lm`	Lan Manager Kerberos authentication … is attempted, including the LM hash; if the server doesn't support encrypted passwords, the authentication fails.
`none`	as with `lm` Kerberos authentication … except that, if the server doesn't support encrypted passwords, plain-text passwords are used.
`ntlmv2_off`	Kerberos authentication is attempted … otherwise NTLMv1 authentication is attempted, including the LM hash; If the server doesn't support encrypted passwords, plain-text passwords are used.

(Note: "NetBIOS" as used below means "NetBIOS over TCP/IP.")

"how to use SMB TCP/UDP ports" can be one of:

`normal`	445 or NetBIOS	(default) Attempt to connect via port 445. If that is unsuccessful, try to connect via NetBIOS.
`no_netbios`	445	Attempt to connect via port 445. If unsuccessful, do not try to connect via NetBIOS.
`netbios_only`	NetBIOS	Do not attempt to connect via port 445.

FILES

/etc/nsmb.conf The global configuration file. ~/Library/Preferences/nsmb.conf The user's configuration file, conflicts will be overwritten by the global file.

EXAMPLES

# Configuration file for example.com (a comment)
           [default]
           minauth=ntlmv2
           streams=yes
           soft=yes
           notify_off=yes
           domain=DOMAIN
           [WIN98]
           addr=windows98.apple.com

The default section specifies that only Kerberos and NTLMv2 authentication should be attempted;
Meaning that NTLM authentication should not be attempted if NTLMv2 authentication fails, and
plain-text authentication should not be attempted if the server doesn't support encrypted passwords.

FILES

nsmb.conf Keeps static parameters for connections and other information. See nsmb.conf for details.

/etc/smb.conf

; Configuration file for the Samba software suite.
; configuration option, please refer to the man page for smb.conf(5).
;
; gives all clients access to their home directories and
; allows access to all printers specified in /etc/printcap.

; BEGIN required configuration

; Parameters inside the required configuration block should not be altered.
; They may be changed at any time by upgrades or other automated processes.
;
; Site-specific customizations will only be preserved if they are done  outside this block. 
;If you choose to make customizations, it is your
; own responsibility to verify that they work correctly with the supported configuration tools.

[global]
    debug pid = yes
    log level = 1
    server string = Mac OS X

    printcap name = cups
    printing = cups

    encrypt passwords = yes
    use spnego = yes

    passdb backend = odsam

    idmap domains = default
    idmap config default: default = yes
    idmap config default: backend = odsam
    idmap alloc backend = odsam
    idmap negative cache time = 5

    map to guest = Bad User
    guest account = nobody

    unix charset = UTF-8
    display charset = UTF-8
    dos charset = 437

    vfs objects = notify_kqueue,darwinacl,darwin_streams

    ; Don't become a master browser unless absolutely necessary.
    os level = 2
    domain master = no

    ; For performance reasons, set the transmit buffer size to the maximum and enable sendfile support.
    max xmit = 131072
    use sendfile = yes

    mangled names = no
    stat cache = no
    wide links = no

    ; The darwin_streams module gives us named streams support.
    stream support = yes
    ea support = yes

    ; Enable locking coherency with AFP.
    darwin_streams:brlm = yes

    ; Core files are invariably disabled system-wide, but attempting to
    ; dump core will trigger a crash report, so we still want to try.
    enable core files = yes

    ; Filter inaccessible shares from the browse list.
    com.apple:filter shares by access = yes

    ; Check in with PAM to enforce SACL access policy.
    obey pam restrictions = yes

    ; Make sure that we resolve unqualified names as NetBIOS before DNS.
    name resolve order = lmhosts wins bcast host

    ; Pull in system-wide preference settings. These are managed by smb-sync-preferences.
    include = /var/db/smb.conf

    ; Pull in system share configuration. These are managed
    ; by smb-sync-shares.
    include = /var/db/samba/smb.shares

[printers]
    comment = All Printers
    path = /tmp
    printable = yes
    guest ok = no
    create mode = 0700
    writeable = no
    browseable = no

; Site-specific parameters can be added below this comment.
; END required configuration.

`-h`	outputs: usage: smbutil [-hv] subcommand [args] where subcommands are: help display help on specified subcommand lookup resolve NetBIOS name to IP address status resolve IP address or DNS name to NetBIOS names view list resources on specified host dfs list DFS referrals identity identity of the user as known by the specified host
Commands :
`lookup [-w host] name`	Resolve `name` to an IP address. The NetBIOS name server can be specified with `-w host` . Example: smbutil lookup kitchen Got response from 192.168.1.6 IP address of kitchen: 192.168.1.6
`status server`	Resolve `server` (IP address or DNS name) to NetBIOS workgroup and system name. Example: smbutil status kitchen Workgroup: RWSW Server: KITCHEN
`view //[domain;][user[password]@] server`	List resources available on the specified server for the user user. example: smbutil view //kitchen Password: Share Type Comment ------------------------------- PACKAGES disk IPC$ pipe Remote IPC HDimages disk print$ disk Printer Drivers DATA disk BACKUP disk DATA000 disk backups disk APPS disk Interchange disk EMAIL disk ipx1600k printer Canon pixma 1600 SYS disk JAVAAPI disk DATA0 disk 15 shares listed from 15 available
`help command`	Print usage information about command.

FILES

SEE ALSO

`nsmb.conf`

Section names:

FILES

EXAMPLES

SEE ALSO

FILES

/etc/smb.conf