2023-01-26 7:43 GMT+09:00, David Howells <dhowells@xxxxxxxxxx>:
> Tom Talpey <tom@xxxxxxxxxx> wrote:
>
>> What are you trying to test?
>
> I'm trying to make sure my iteratorisation patches work, including with
> RDMA.
> I have some functions to decant some data an iterator either into a
> scatterlist and into an RDMA SGE array without the need to get refs on
> pages.
>
>> Since encrypted SMBDirect traffic is known to have an issue, I guess I'd
>> suggest turning off encryption-by-default on the share.
>
> How do I do that? In the ksmbd config?
>
> [global]
> smb3 encryption = yes
I recently changed the input of the smb3 encryption parameters. It is
"auto" by default. Requests/responses will not be encrypted unless you
give the seal option in the mount options. So please update the latest
ksmbd-tools for your test.
man ksmbd.conf
smb3 encryption (G)
Client is disallowed, allowed, or required to use SMB3
encryption. With smb3 en‐
cryption = disabled, SMB3 encryption is disallowed
even if it is requested by the
client. With smb3 encryption = auto, SMB3 encryption is
allowed if it is requested
by the client. With smb3 encryption = mandatory, SMB3
encryption is required. i.e.
clients that do not support encryption will be denied
access to the share.
Default: smb3 encryption = auto
Thanks.
>
> David
>
>
