Disabling SMB server signing on a media server instance
The Server Message Block (SMB) configuration on media server application instances enforces SMB server signing by default. This configuration may cause a performance reduction with Universal Shares. If you see a performance reduction, you can use the following procedure to disable server signing.
Warning:
Disabling SMB server signing leaves the instance vulnerable to man-in-the-middle attacks. Only disable server signing if your instance is in a fully trusted private network.
To disable SMB server signing
- Log in to the media server instance as the appadmin user and run the following command to navigate to the SMB configuration file:
sudo vi /etc/samba/smb.conf
- Modify this file to comment out the following entry:
server signing = mandatory
- Run the following command to restart the SMB service:
sudo systemctl restart smb