From patchwork Sun Nov 1 16:38:56 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Arne Fitzenreiter X-Patchwork-Id: 3621 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4CPMFb38Pjz3wl4 for ; Sun, 1 Nov 2020 16:39:15 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4CPMFZ3xpyz11V; Sun, 1 Nov 2020 16:39:14 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4CPMFZ2Z51z2xrJ; Sun, 1 Nov 2020 16:39:14 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4CPMFX1qvNz2xNg for ; Sun, 1 Nov 2020 16:39:12 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4CPMFW3HWHzBP; Sun, 1 Nov 2020 16:39:11 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1604248751; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc; bh=zdZZEmFH2lGM2KV3tehedeoGecK6XikflcKvtukaroE=; b=dE6ViGiuJ0pVdNtLDLLYqOUIIZzjikvO4EO1qxCUBfYQKZrL7dJGKNw0ypSfguY43y27GS lVbVu1yVxC3JZPAg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1604248751; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc; bh=zdZZEmFH2lGM2KV3tehedeoGecK6XikflcKvtukaroE=; b=wUCui56RH4llWpK2TH0asWTE92B69kb6pzxZi7MOiucjTif5/KveufAKRAPxtVJXCkEL7E ZrWppMxlZjBuXnINO+fYc9CT42qkk9NH38pJUqm57XCMSP3BpImjcpViFNfWCIsRpZUr7Y r87EjdnFxv0RdrBj7idTQxenwEdczu5m7kMXwOHXu/4ulaqHS7gd/zR8l1SLT/F7vSM6jC Uz8Uu+KrFWU1452zAcXXuB5SdyHPb3DP+QHYNNP52Ng7p4PiPvIxQML+Nb6cNotYEF0QZD +nfkXI3V/gzQBcXuyS7Fxg+6H/cLyijHUzZa5xRgHnvEhTfrgtaenM04X7+D8A== From: Arne Fitzenreiter To: development@lists.ipfire.org Subject: [PATCH] samba: allow to configure server protocol version Date: Sun, 1 Nov 2020 17:38:56 +0100 Message-Id: <20201101163856.4742-1-arne_f@ipfire.org> X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Arne Fitzenreiter Errors-To: development-bounces@lists.ipfire.org Sender: "Development" add entries for server min/max protocol in /var/ipfire/samba/settings. This settings may be dangerous but sometimes they are needed so it will not showed in the cgi. Signed-off-by: Arne Fitzenreiter --- html/cgi-bin/samba.cgi | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/html/cgi-bin/samba.cgi b/html/cgi-bin/samba.cgi index ec41adc5d..4b57c1add 100644 --- a/html/cgi-bin/samba.cgi +++ b/html/cgi-bin/samba.cgi @@ -835,7 +835,16 @@ if ($sambasettings{'ENCRYPTION'} =~ m/(desired|required)/) { print FILE "smb encrypt = $1\n"; } +if ($sambasettings{'SERVER_MIN_PROTOCOL'} ne "" ) { + print FILE "server min protocol = $sambasettings{'SERVER_MIN_PROTOCOL'}\n"; +} + +if ($sambasettings{'SERVER_MAX_PROTOCOL'} ne "" ) { + print FILE "server max protocol = $sambasettings{'SERVER_MAX_PROTOCOL'}\n"; +} + print FILE <