| Server Message Block |
Article Index for Server |
Website Links For Server |
Information AboutServer Message Block |
| CATEGORIES ABOUT SERVER MESSAGE BLOCK | |
| windows communication and services | |
| network file systems | |
| network protocols | |
| application layer protocols | |
|
HISTORY SMB was originally invented by Barry Feigenbaum at IBM to turn DOS " Interrupt 33" local file access into a networked file system, but the most common version is modified heavily by Microsoft . Microsoft merged the SMB protocol with the LAN Manager product they had been developing with 3Com , and continued to add features to the protocol in Windows For Workgroups and later versions of Windows. SMB was originally designed to run on top of the NetBIOS and NetBEUI APIs (which are typically implemented with NBF , NetBIOS over IPX/SPX , or NBT ), though SMB can also run directly on the TCP/IP protocols, a feature introduced with Windows 2000 . "SMB the protocol" is not to be confused with the SMB services that run on it, nor with NetBIOS, nor with the DCE/RPC services that use SMB as an authenticated Inter-process Communication channel (over Named Pipe s), nor with the "Network Neighborhood" protocols which primarily but not exclusively run as datagram services directly on the NetBIOS transport. At around the time when Sun Microsystems announced s, Hard Link s, larger file sizes and an attempt at supporting direct connection without all the NetBIOS trimmings — an effort that was largely experimental and required further refinement. Microsoft submitted some partial specifications as Internet-Drafts to the IETF
, though these submissions have expired. Because of the importance of the SMB protocol in interacting with the dominant Microsoft Windows platform, coupled with the heavily modified nature of the SMB implementation present in that platform, the Samba project was created to Reverse Engineer and provide a Free implementation of a compatible SMB client and server for use with non-Microsoft operating systems. With Windows Vista , Microsoft introduced Server Message Block 2.0 . IMPLEMENTATION Client-server approach SMB works through a peer-peer approach, where a Client makes specific requests and the server responds accordingly. One section of the SMB protocol is specifically for filesystem access, such that clients may make requests to a File Server , but there are other sections of the SMB protocol that specialise in Inter-process Communication — IPC. The SMB protocol was optimized for local Subnet usage, but one could use it to access different subnets across the Internet — on which MS Windows file-and-print sharing exploits usually focus. SMB servers make their file systems and other resources available to clients on the network. Client computers may have their own hard disks, which are not publicly shared, yet also want access to the shared file systems and printers on the server, and it is for this primary purpose that SMB is best known and most heavily used. However, the SMB file server aspect would be as nothing if it was not for the NT Domains suite of protocols, which provide NT-style Domain-based authentication at the very least. The NT Domains protocols are MSRPC services that are almost exclusively available on SMB IPC " Named Pipe ", and almost all implementations of SMB servers use NT Domain authentication to validate user access to resources. Performance issues It is often believed that the SMB protocol makes heavy use of network Bandwidth because each client Broadcasts its presence to the whole subnet. SMB itself does not use broadcasts. The broadcast problems commonly associated with SMB are actually caused by the NetBIOS service location protocol. By default, a Microsoft Windows server will use NetBIOS to advertise and locate services. NetBIOS functions by broadcasting services available on a particular host at regular intervals. While this is usually an acceptable default for a network with fewer than 20 hosts, broadcast traffic will cause problems as the number of hosts increases. This problem can be mitigated by a proper implementation of the Windows Internet Naming Service (WINS) service location protocol. WINS uses a much more advanced system of registration and centralized service requests, but imposes its own complexity upon the design and maintenance of the network. Dynamic DNS is also a viable option and the Microsoft-recommended method in Microsoft's Active Directory environment. Network latency should be expected to have a significant impact on the performance of the protocol. This is most often observed while navigating among folders through SMB when there is significant network latency between the hosts. For example, a VPN connection over the Internet will often introduce network latency, which can make for a frustrating experience. Microsoft's modifications Microsoft has added several extensions to its own SMB implementation. For example, NTLM Version 2 was added because NTLM version 1 (which is derived from the original legacy SMB specification's requirement to use IBM "LanManager" passwords) uses DES in a flawed manner. Additionally, the NT 4.0 Domain Logon protocols use 40-bit encryption outside of the United States , which is insecure by modern standards. Points of interest SMB's "Inter-Process Communication" mechanism deserves a specific mention. Over the SMB "IPC" system, Named Pipe s are provided. SMB's IPC mechanism is one of the first few inter-process mechanisms commonly available to programmers that provides a means for services to inherit the authentication that was carried out when a client first connects to an SMB server. Named pipes inherited authentication is so ubiquitous and transparent that it is often simply taken for granted by programmers using the Windows API and Windows users alike. Some services that operate over named pipes, such as those which use Microsoft's own implementation of DCE/RPC over SMB, known as MSRPC over SMB, also allow MSRPC client programs to perform authentication, which over-rides the authorization provided by the SMB server, but only in the context of the MSRPC client program that successfully makes the additional authentication. As another point of interest, SMB uses a special type of locking mechanism on files in order to improve performance. This type of locking is referred to as Opportunistic Locking . SMB is also used as the basis for Microsoft's Distributed File System implementation. ALTERNATIVE VERSIONS AND IMPLEMENTATIONS This list below explicitly refers to "SMB" to include an SMB client or an SMB server, plus the various protocols that make SMB useful, such as the Network Neighborhood suite of protocols and the NT Domains suite. For simplicity and conciseness however, no mention of the extent or completeness of the reimplementation or porting status is mentioned for any of these implementation, and they are all "lumped" together and referred to simply as "SMB".
REFERENCES SEE ALSO
EXTERNAL LINKS
|
|
|