topic Re: how to find smb version being used by cifs sessions for dc connection in Network and Storage Protocols

how to find smb version being used by cifs sessions for dc connection

kalki1 — Thu, 20 Feb 2025 22:22:50 GMT

Hi,

Is there a way to know what SMB version is being used for dc connections. I see both SMB1 and SMB2 are enabled at the cluster level for DC connections and the domain controller SMB configuration says the same.
How do I know which version of SMB is being used by CIFS sessions.

This is required as the new array replacing the old one can use SMB2.0 instead of SMB1.0 for dc connections.

Version: ONTAP 9.1P2

Re: how to find smb version being used by cifs sessions for dc connection

AmitKerkar — Fri, 21 Feb 2025 00:47:13 GMT

vserver cifs session show -vserver <svm_name> -instance

Re: how to find smb version being used by cifs sessions for dc connection

kalki1 — Fri, 21 Feb 2025 01:31:07 GMT

thank you, Amit
It looks like the above command shows which SMB version used for data connection but not the version used for DC connection

Re: how to find smb version being used by cifs sessions for dc connection

AmitKerkar — Fri, 21 Feb 2025 02:24:26 GMT

vserver cifs security show -vserver <svm_name>

shows smb1 or smb2 (enabled/disabled) for DC Connections

-------

if this doesn't help, I suggest contacting AD admin for DC SMB Settings.

alternately , you can also use pktt

Re: how to find smb version being used by cifs sessions for dc connection

liu — Mon, 24 Feb 2025 07:58:47 GMT

vserver cifs security show -instance

vserver cifs security show

If this parameter is set to , the command displays CIFS security configuration information only for CIFS servers where SMB2 is enabled for use with connections to domain controllers. If set to , the command displays security configuration information for CIFS servers where SMB2 is not enabled for use with connections to domain controllers. If set to , the command displays security configuration information for CIFS servers where the system-default setting (SMB2 enabled) is used for connections to domain controllers.truefalsesystem-default