Why disable IPv6 for Samba?
I'm currently improving the support for changing the IP network in
Debian Edu, and update the subnet-change script to work better.
In the process I discovered that smb.conf now hardcode the tjener IP
address for the server, and the backbone subnet for the clients. Why is
this? This is the changelog entry assosiated with this change, which
was done by Mike Gabriel 2011-09-03:
* Disable IPv6 for Samba on Skolelinux systems (clients+server).
Why is it important to disable IPv6 for Samba? I fail to find any
emails where this has been discussed on the list. Can we disable ipv6
without hardcoding IP addresses in smb.conf? This is the only hardcoded
IP address/subnet left on clients, as far as I can tell, and I would
really like to avoid hardcoded static IP setup on clients.
There is another hardcoded IP subnet in smb.conf on the server, blocking
access to anyone from outside the, but as the subnet-change script will
run on the main-server anyway, it isn't that much of a problem.
This is the commit in question:
Index: etc/samba/smb-debian-edu.conf
===================================================================
--- etc/samba/smb-debian-edu.conf (revisjon 74049)
+++ etc/samba/smb-debian-edu.conf (revisjon 74050)
@@ -26,6 +26,10 @@
#server signing = auto
server schannel = auto
+# disable IPv6 for Samba on Skolelinux systems
+ interfaces = 127.0.0.1 10.0.2.2
+ bind interfaces only = yes
+
# server string/NT Description field
server string = %h server (Debian Edu/Skolelinux Main Server)
Index: etc/samba/smb-debian-edu-client.conf
===================================================================
--- etc/samba/smb-debian-edu-client.conf (revisjon 74049)
+++ etc/samba/smb-debian-edu-client.conf (revisjon 74050)
@@ -23,6 +23,10 @@
# server string/NT Description field
server string = %h server (Samba %v)
+# disable IPv6 for Samba on Skolelinux systems
+ interfaces = 127.0.0.1 10.0.0.0/8
+ bind interfaces only = yes
+
# Use kerberos
realm = INTERN
--
Happy hacking
Petter Reinholdtsen
Reply to: