Voltar
-
Título
How to find what version of SMB VGP is using from the client side. -
Descrição
How to find what version of SMB VGP is using from the client. -
Causa
The version of SMB being used is dependent on what you have configured in your Windows / AD environment.
Authentication Services will choose the highest available dialect. -
Resolução
If you run vgptool with debug (vgptool -d5 apply), and it needs to do something over SMB, look for:
2019-07-02 09:28:10 [debug] (1882) CIFS DEBUG: (end) NEGOTIATE -- success
2019-07-02 09:28:10 [debug] (1882) SMB2 DEBUG: (begin) SMB2_SESSION_SETUP 0x01 -- authenticating to cifs/ad.test1.sys@domain.com
2019-07-02 09:28:10 [debug] (1882) SMB2 DEBUG: (end) SMB2_SESSION_SETUP -- success
This means that it is using either SMB2 or 3.
The difference between 1 and 2 is pretty big, but between 2 and 3 not so much, 3 uses the same SMB2 code for the most part.
You can see this if you run a vgptool clean first, so it has to go back to the SMB side of things to re-acquire policies.
If that isn't ran, it's very possible vgptool won't need to do anything SMB related and you won't see the above noted output.
So to recap if you would like to check which SMB version is being used with the above method, run the following:
/opt/quest/bin/vgptool clean
and then apply with debug:
/opt/quest/bin/vgptool -d5 apply
Pipe it to file if you like as it may help with searching on SMB:
/opt/quest/bin/vgptool -d5 apply 2>&1 | tee /tmp/vgp.out