218 - SMBv2 Abschaltung auf dem Cloud Storage

The LRZ is constantly striving to improve the security of its services. The LRZ therefore plans to deactivate the SMBv2 protocol for accessing the cloud storage nas.ads.mwn.de in 2022. The LRZ is following the recommendations of the manufacturers. The deactivation of SMBv2 will significantly improve the security and performance of communication between client and server.

Planned procedure

Several shutdown dates are planned, since not all users/systems can be identified in advance, so that we cannot currently foresee whether important systems still rely on SMBv2 and SMBv2 must be temporarily reactivated. We will announce the specific shutdown dates to the administrators (Netzverantwortliche, Teiladministratoren) several days in advance in each case, so that the administrators can prepare for any problems.

Final shutdown date: 16.12.2022

Share for testing access

The LRZ has set up a repository for you to test access via SMBv3. The repository is writable for all users. You can access the repository via the UNC path \\isar.ads.mwn.de\SMBv3. However, please do not store sensitive data there. The share is readable for all users.

Notes on possibly affected systems

General note

If you experience problems with your system, please restart the system first. Some operating systems still insist on the old connections even after the server-side changeover and the old connections can unfortunately only be cleaned up by restarting.

Linux

For some Linux distributions, it was necessary for a while to explicitly specify the version of the SMB protocol for the mount command. You should possibly change this here accordingly. You can find a current guide for mounting the cloud storage on our pages under https://doku.lrz.de/pages/viewpage.action?pageId=30082519.

Windows

All currently supported Windows versions can access the cloud storage via SMBv3. Access under Windows 7/Windows Server 2008 R2 and before is no longer possible with the deactivation of SMBv2 and cannot be upgraded. Please check to upgrade to a Windows version that is still supported. Alternatively, you can use https://webdisk.ads.mwn.de for access.

Printer with Scan to File

When using Scan to File with Cloud Storage, please check if the printer can be switched to SMBv3 in the settings. If the functionality is not available, a firmware upgrade of the printer might help.