I've been going down a rabbit hole with SAMBA and CIFS.
We have a server that was pentested, and we were pulled up for "SMB server signing not enforced"
Fine, I thought, I'll just turn server signing on. Then I came up against the different dialects of SMB, and their relationship to CIFS, and why you should never use CIFS.
But, in my configuration, (SMB server is RHEL 6.7 with samba-3.6.23-30, SMB client is RHEL6.7 with cifs-utils-4.8.1-20), the client uses mount.cifs to mount the share in fstab.
What gives? This seems to be the way to mount a samba share on RHEL, but CIFS is supposed to be a dirty word! mount.smbfs is buggy and deprecated.
Also, how do I know which dialect my samba server is speaking? Apparently samba since 3.6 supports SMB2, but how do I enable it (I've tried max protocol = SMB2 in the [global] section of smb.conf), and make sure it's actually doing it?
How do I enable message signing, and crucially, check that it is actually doing it?
The pentester used nmap to discover message signing was disabled, but I don't have that available. Any way with standard linux tools?