Samba with Jeremy Allison webinar poster

Samba with Jeremy Allison

Watch Now

Jeremy Allison will join Zane and Rose on Thursday, March 28th, at 11:00am PT! Jeremy is the co-creator of Samba and a Distinguished Engineer at CIQ. Learn about Samba, open source, Jeremy, and more!

About Samba

Samba is an open source software suite that enables file and print sharing between Unix-like and Windows-based systems. It implements the Server Message Block (SMB) protocol, allowing computers to share resources across different operating systems easily.

Transcript

[Music] [Applause] [Music] oh [Music] good morning good afternoon and good evening wherever you are thank you for joining at ciq we're focused on powering the next generation of software infrastructure leveraging the capabilities of cloud hyperscale and HPC from research to the Enterprise our customers rely on us for the ultimate Rocky Linux werewolf and aper support escalation we provide deep development capabilities and solutions all delivered in the collaborative Spirit of Open Source what's up I'm waiting how about is it working this week yes yes sir I can hear you I can see you we are ready to party with Mr Jeremy Allison we're g to be

talking about Soma today all things somba so I let him know I need to know why I need to know how and then I need to really understand the why again we're gonna get into that in just a moment but first of all Jeremy we have a cool giveaway have you seen seen this thing yet I haven't no it is actually pretty cool so I'm going to do a little present I'm going to share my screen I'm gonna go in here this is the one right there boom so we are giving away like our very look at that so cool it's a little car heart

back I know it's got know you're not eligible J sorry we keep having to say that not eligible keep you say it so we are 39 I think I did that math right right like 1, minus 961 we are 39 subscribers away from our 1,000th YouTube subscriptions we are so excited so make sure that you share this that you like it that you subscribe that you share at all the things and when we reach 1,000 we are going to go into our archives and we're going to do maybe we'll make chat GPT do it right like pick a random number pick a random person we're

going to pick them and they enough is it I know Jeremy has opinions on writing code for random numbers don't Tri of me that is a good point but probably a side note but I like your spirit we are going to pick a lucky winner and they're going to win that backpack then of course we will get in touch with you however we possibly can we're going to be um of course sharing it live um on that session as well okay so we're getting there we're close this is amazing stop sharing generation of course what's that I said fips compliant random number generation of course

View full transcriptHide full transcript

see this why we have you Jeremy to keep us honest in here for sure so I actually um there's a little Link in here that you guys gave me this is actually on our ciq website because SBA so probably most people who are watching this or ever will watch this has at least heard the word Samba if not have intim relationship with it maybe so do you mind if I just read these like couple little paragraphs that we have on what sambba is to kind of get us all on the same page no problem okay and then you can correct us if there's an editing

error SBA is an open-source software suite that enables file and print sharing between Unix like systems and windows-based systems it implements the server message block SMB protocol allowing computers to easily share resources across different operating systems with SBA Linux Unix based servers can provide shared directories as network drives to Windows clients granting users the ability to access and manage files as if they were local Samba also supports printer sharing ensuring that printers connected to the somba server are accessible to Windows users with this Authentication options integration and windows domains and a userfriendly web-based Administration tool Samba fatil facilitates integration and secure resource sharing in platform

environments very impressive uh we we ditched the you the web-based administration tool a while ago okay this is good people did that much better than than the the sber team um that's kind of accurate it misses a massive it's very old unfortunately just like sber um it misses a massive chunk of functionality that we now have um just as some research for this H podcast I downloaded the very first version of samb available the source code wow the lines of code uh and this was the one I remember working on um back in around we we predate Linux or we we started around the at

same time as the Linux kernel itself and the very first version of samb was 5,000 lines of C code um and so it was small it was easy to get your your mind around let me give you a guess how how big do you think the current 4.20 released version of sber is now how many lines of C code I'm gonna guess the high hundreds of thousands like 900,000 gu I would say 567,000 5 million five million W million that does include the python too but there's five million lines of code in there that's 30 years of of growth for you so so sambus started

um by it was started by the smartest man in Australia Andrew tridel um mainly because he was doing a PhD that was very bored with and he uh he was doing a computer science PhD I believe and he just hated it and as he said never underestimate the power of a procrastinating student so he had a a deck machine that he wanted to communicate with for some reason and he he basically looked at the network traffic and decided he was going to implement that uh and published it and an open source G license and I was the first person who sent him a patch because

he was wrong of course and then another chap uh in in Germany vcan lbe who's still involved with both he and I are still involved with TRD has gone on to Greater and more interesting things um he he submitted the third patch um and why why did we do that because we needed it so at the time I was working on porting some software to the brand new operating system that was going to take over the world called Windows NT right and as everybody knows that's runs everything these days oh wait um anyway at the time it was going to make all Unix as obsolete

Etc so everybody wanted to Port their software onto Windows um but the problem was Windows would only talk effectively to Windows and they had this what was considered well it was at that time a proprietary uh Network file system called SMB um server message block was actually invented by a chap called uh Barry Fen bomb who worked for IBM I've actually met him he came to a samb conference one year and we got to ask him questions like why did you do this um but yeah it was a proprietary file system it was not no information on how it work was published and so so

tridge uh reversed engineered it essentially although we we don't use those words these days because of legal issues um but he worked out how it worked and he published code and I needed that because I was trying to write a code that ran on Windows but the source C control system ran on Unix and I needed a way to bridge that Gap so that's that's how it started the printing came later and the printing thank God is is almost completely dead now only masochists use sber to share printers there are much better ways of sharing printers these days but the big missing piece uh that

we really should update that that uh uh blur about is active directory so I presume everybody's heard of Microsoft's active directory samb is now a full open-source active directory domain controller you can deploy a network of active directory domains and you can run the whole thing on samb and windows can join um L machines can join anything that's an active directory client can join and so that's a that's that's probably about 4 million of the 5 million lines of code just for that because that thing is really complex EXC me but um yeah so so that's that's the why really um and you know we

we've been developing this for 30 years the reason it still exists because let's be honest when was the last time you used your windows on Mac machine and you saved something to a local share 10 years ago 15 years ago you're sticking in the cloud now right like everybody else does and in fact if you ask most people on the street what is a file system where do things go uh in the cloud it goes to Amazon Google Microsoft whatever they don't really know all their apps on their phone they store stuff but they don't really know where they go and they don't have to

care and that's that's a good thing I mean you know remember the days of local networks everyone having to work out where things were and share it that was the era that was created for um so it's not exactly as um popular in that way I mean we used we used to be so popular that when red hat first started selling um Linux in box sets that you could buy at fries or you know your local tech center they would actually put contains 1.9 point whatever or contains Apache you know they would actually put the version numbers because it was an exciting feature um these

days samb is is Plumbing technology so you know why is it still here the reason is is because SMB the file system that wouldn't die is in every it's in your Mac it's in your Linux box it's in your iPhone it's in your networker PL server it's in the little um the the little um autonomous uh Nas services that people sell as home backup devices SMB is everywhere and it's really interesting how that actually came to be SRE is actually part of that despite Microsoft's best efforts at the time they're really they're really glad we exist now for the longest time for the first 15

years of our existence they were not happy that we existed but now pretty much like LX they're they they're they're really happy we exist so sber is used in many of the same places that NFS would be used um oh sber also now has a clustered file system um uh yeah so so most people don't actually know or care where their files go but administrators Engineers people who run complex systems they have to know and that's where sber has moved into sber has moved into this sort of Plumbing layer um and and sometimes it's used as a Gateway so you can you know you can

attach to a share that actually then backs up into the cloud um it's it's become part of the infrastructure uh really you know it's big it's complex samb used to be considered a product it's like oh what's your version of samb watch your version of SMB these days sber is much more like a big Lego kit of Parts um not not so much the Duplo Lego more like the Technics Lego it's it's complicated build much more complex things yeah yeah you can build more complex things and it it's quite complex to set up but because of because it's open source because you can get the

uh you get at the internals of it you can make it do an amazing number of flexible things I'm always surprised by by the number of places samb gets used and the number of things that people do with it that you know and and of course because it's open source they don't have to tell us they just do it and and make it do what they need it to do um so that's that's kind of really fun and that's that's why it's still interesting oh yes question Sor I'm sorry I'm just I have lot of questions to Rose come on I know i' love to

hear you going but I I'm sorry you're good Jeremy you're good yeah some weird question so you said that back in the day when it was first released that guy sorry I should have jotted down his name um what was the platform called where he released that on open source leading into where is somba now maintained well he released it on an FTP site um if you remember that that was a server that he had running in his Department he was at the austr how did you get it this is how did you like I was on I downloaded it I I was on a

mailing list and he said oh I've created this thing and I and it had a link to the FTP site so I typed FTP in and downloaded it there was the S this was we didn't have source code control back in those days um so I sent him a patch and 10 minutes later a new version came out coin oper mailing list is not like the spam thing it's not like the spam thing we're used to today mailing list back then used to be very useful we we have a question from from Dave Rush where did CS fit into the development timeline um so CS

is uh cth stands for common internet file system and the only thing that is true about that is it's common because it wasn't an Internet it's not a file system and it wasn't designed for the internet so what happened was when sun and Microsoft was squabbling and and fighting if everyone remers Sun Microsystems now bought by Oracle they they were um colossuses of their day fighting with each other and some created a a network file system called Web NFS uh which was Network file system um run over the internet and of course micos said we have to have something like that so they took SMB

said this works over the internet too because it worked over TCP and so they created this thing they called cfts and they started to document it um it was a terrible idea uh and it's still it it's still that name is still in Legacy but it really everyone really uses uh the newest version of the protocol now called smb3 so CS is kind of a a legacy thing that was literally a marketing exercise back in the back in the late 90s early 2000s and this this was this happened just before Sun sued Microsoft but we'll we'll get about about SMB but we can get into

that later if you like um yes I have two different questions for you Jeremy got two so one I think I think I know the answer but how did you land or how did you guys land on the name Samba samb that's one yeah uh so so this was tridge uh we were originally called SMB server and um a company in uh Washington State contacted us in SLE area very politely and very nicely said I'm sorry but we're selling a proprietary product that does the same and we have a trademark on this so you going to have to find a new name so tridge being

the Unix hacker he is he he Greed for the letters uh grep is a text search for the letters s m and b in all the words in user dict Words which was unix's spelling database and it came out with sber and salmonberry so good job yeah let's let's call it sber that's kind of a better name funly enough many many years later uh the guy who sent him that email actually ran into him at a Linux conference and said man I wish we hadn't done that was a much cooler name because a lot a lot of those proprietary vendors went out of business once

s got popular because there there's no way to compete um interestingly enough the SNB Market is much more uh varied and diverse and popular now than it ever was back when Microsoft tried to keep it a secret and that's that's actually an interesting lesson but that comes along with the lawsuit and the whole you know European Union antitrust stuff um but yeah it's a much more vibrant market now there are much there are many different implementations of SNB that you can get for just about any platform it's it's like the universal glue so so NFS is fine if everyone knows NFS for but NFS is

kind of Unix to Unix SMB um even though it's designed only around windows and the initial requirements for it is make windows work with Windows people have made this thing work with just about anything um one one of uh one of the ciq engineers Ronnie Solberg he has an SMB library that works on his PlayStation he uses it PlayStation Library games over SNB why because he can so hearing all the different use cases it always makes me wonder because SMB is everywhere what do you think or what's what something comes to mind as a cultural impact of all of this because it is definitely impacted

a lot of different platforms companies people the way that we view file systems the way that we share file system like what would you say is a cultural impact of this so I I think what it did was it taught a generation of Engineers is that interoperability was good um now we're moving away from that with the cloud platforms who are isolated silos and saying oh no you must do this our way only our protocols Etc the pendulum will swing back again because if you remember the back in the day when samb was created and SMB was being used the you know the 900 pound

gorilla in the room was netwar and they were proprietary you couldn't create a network on there was only Noel could create the netwar client and server and so Microsoft you know they did try and open it up a little bit cths was one effort some documentation efforts were were another they didn't want to let it go completely but they they let enough go to make it possible to interoperate and eventually and the antitrust violations of course Crush Crush netwar um and then essentially all of the all of the products they they began to realize especially after the European union lawsuit that actually documenting all of

this was really good because what it meant was that you know even though it was harder to control they gave up some control but what they gained was ubiquity it it went everywhere Apple decided to use smb3 as their you know they they replaced um what what was it uh AFP Apple yeah they replaced it with SNB um you know net apppp started using it uh IBM started using it they had IBM had some like 15 different SMB implementations at one point s was just one of them but it it went everywhere um and so you know the reason for that is is if you're

writing applications sort of your standard server applications you've got to store stuff on a file system and you know before the cloud um it was really convenient to be able to store things centrally on a a different server so you would have your your storage server and that would serve all the clients running compute or whatever applications but they could all access the same stuff simultaneously and and um before applications were re architected for the cloud that was kind of important because when you're doing Cloud work nothing can happen until the file is complete you upload a file to the cloud no one else even

sees it until you've saved it you want to make a change you want to change one character whole new version gets saved SMB isn't like that like like NFS it's it's a real file system you want to change one bite in the middle of a file you could do that you know you want to lock the you want to have a a lock over the first 10 bites excuse me of a of a file so that no one else can access that while you're working on it you can do that over SNB you can't do that in the cloud so you have to rearchitecturing that's

in the process of going on um but under the covers it's still really convenient to have what looks like a real file system um where you've got directories you know and and the other thing is you can have a clustered version of SMP so that you can have essentially many many front end nodes that clients talk to and they all share a common back end uh and sber has a clustered implementation as do many other vendors as well um so I mean uh the the reason NFS is still popular um NFS actually learned NFS version 3 was stateless and it was Unix to Unix it

was kind of a mess uh it worked but anyone who's of a certain age will remember NFS server not responding still trying uh as a the bane of their existence um so SMB is not stateless it's connected over a TCP pipe um it now you can do RMA over it smv direct they called it um it's more complex and and uh nfsv4 basically copied many of the features from smb3 um and so they they kind of compete so NFS is considered like the Unix way of doing things but SMB is the windowsyoutube most people are St most people actually just want to store their files

their eyes are glazing go at this point it's like why should I care but the people in the back end who are actually working on storage solutions this is really important for them because it means that you can craft a solution around the very familiar Unix interfaces and yet you you don't have to use NFS you can use SMB and in fact vulka who still works on Z his stated goal is I want I want to kill NS so uh yes and I I don't blame him for that NFS is pretty horrible Sorry Sorry by the way he doesn't really speak like that his English

is better than mine so that's great well with an accent you can really say anything and you know Americans just like it it always sounds nice and pleasant and friendly uh yes we can be very s sarcastic though yeah so where you said that there is is there no longer a web interface I'm sorry I'm so um ignorant oh no there's there many many many web interfaces um but they're just not maintained by the samp team um so we we had a a web interface um that basically allowed you to configure sber because we we run out of a a very complex configuration file and

so this was very hard for people to use and so we thought oh we'll make this easy by adding a web interface we were so bad at it so these days SRA SRA is a kid of parks you want to have a friendly web interface to manage it like you know I ex systems with traz or Synology or qap or any of the server vendors they give you a web interface it's a million times better than what we had so you know you don't even have to know that you're using samb or or SMB that you just configure it using the web interface and everything

works it's awesome so where you mentioned I don't know that I would say their user PES all that great one of those home NZ appliances I wouldn't say there we interfaces all that well the take owning we we did try but we're not user interface programmers we are you know we are we are systems programmers so so samb has spun off a bunch of different technologies that are actually used in many other places so so the user management agent sssd uses a bunch of s Technologies used a bunch of samb Technologies internally uh because some of the libraries we just spun off um there's some

incredibly useful libraries in zamb um so I mean you know everybody wants to do JavaScript or rust or what whatever the new hotness is but you know if you're if you're having to write C or C++ or whatever there there's some amazingly useful things still in samb there's a there's an entire asynchronous um C library uh event driven library that we use the there's there also multi-threaded it's yeah that's why it's five million lines of code there's just an amazing amount of technology in there and it's fun to work on although you know it's it's hard to sell um sort of uh developers who like

doing apps on phones on no no drop all that stuff start using VI on a command line interface to work on backend C code yeah that's that's what you want to do so we're all getting old but working on it where are you guys where is the community do you have like a a channel are you guys on GitHub like how do you communicate we're so old we use email still on the email list okay we have the samb mailing list and the samb technical mailing list and originally originally samb was kind of a benevolent dictator model run by TR and me as a you

know um um and then event when tridge left I inherited the mantle of benev dictator and I I I really didn't want to do that so at that point I abdicated essentially and set up a committee that that runs sber but we do most of our communication via email I mean there are various other channels that people use but and in fact all of our development now is done on gitlab um using git um and so that's where people uh put PLL requests and changes and continuous integration you know um it it's it's a complicated project in order to get a piece of code change

into there it has to run through a full regression test which tests every single config including active the whole thing takes like four hours to run you know you make a on line change it's going to be four hours before we know that you didn't break anything so does it have to run through a five million lines of code to change one line well no it has to it's actually that's just the amount of code that's in there what it has to do is to make sure that what you're changing doesn't break any of the expected file system semantics so that's what the test Suites

do they test active directory they test active directory replication they test um the networking part of it they test the file sharing the locking the you know file exclusion every single thing that we can test we do test and the way we wrote those test is we ran them against the Windows server and they're like okay if we want to know how something works we run it against a Windows Server if it passes that then the test is good and it goes into our test suite and then our test Suite only grows um but what that means is it's hard to put bugs in sber

um because if we have something already tested and we have a aggression test for it then any change you make can be guaranteed Not To Break existing functionality having said that we still do I mean cuz we can't test everything and people break it all the time I I recently somebody recently reported a problem with rename that actually turned out to be some code I wrote back in 2004 that's wrong there you go so teach yourself your own code again um yeah so looking back that far and having that many people involved in it there's got to be especially around a file system there have

to be a lot of philosophical challenges when you have that many people trying to contribute to something and maybe not but it seems like there's always going to be the the two or three different ways that people want to solve a problem or want to do things and they typically have some sort of conflict how have you guys dealt with that so first of all windows is right is the Mantra that we we go with in that it has to do what Windows does so if Windows has a certain behavior and somebody comes to us and says I want it to do something different we're

going to say no because we have to interoperate with Windows Windows is considered they're The Benchmark for which SMB is is tested against and so you know if if your changes aren't going to work with Windows then we don't really want them having said that we can extend the protocol in some ways that Microsoft has blessed um this gets into into somewhat into the complicated relationship with Microsoft so we can do some changes around that but you can't break core when Windows functionality and the other thing that really makes Sama work is we have some incredibly smart people working on this now I'm I'm not

saying me there's tridge um tridge was incredibly smart after he left there are several others on the sber team who are incredibly focused and very very good the contributing of the colonel um and they are very good at guiding contributions into the samb way so I've learned a lot from working with these people because one of one of the things that I see in other projects that doesn't happen in samb is when you make a code change you make one small change for one small thing we like many projects we used to come along and say Here's 20,000 L the code change it does this

stuff it's great now somebody would come back and say oh that's great we really want that let's break it up into a 100 patches each which changes you know 20 lines of code or and let's keep it working with regression tests every single step of the way and so it's it's harder to De develop like that but what it is is it's teaching professional engineering and so we have a lot of people who started off you know young and in I Astic here's a million of code here you know put this in and essentially we've helped mold them into better Engineers I've learned to be

a better engineer by working with people they're really smart they're very cautious and they know how to write good code um and that's you know I would I would put the samb code not the old stuff that I wrote but the new sber code I would put up against I would put up against any project in the world an example of best practices I really would it's really good um and and that's that's why when the libraries get spun off people pick them up because they they're very very useful one of the libraries we have have basically turns code into something like C++ where you

can uh allocate resources and then free them all with one call which is incredibly useful if you're running a big project uh it's very rare we get memory leaks now because of that library and that library has been adopted by many of projects because it's so damn useful yeah I can see how it be useful especially in C++ yeah well see actually C++ has has a native way of doing that which um so this is mostly useful for C+ but it it has it you know there are other libraries um a a shared memory mat database that is now clusterware so you can there's some

there's some very interesting features of SMB that require you to have uh especially if you're running it in a cluster that require you to have a consistent database key Value Store actually with much stricter semantics than many of the cloud databases because they eventually they'll sort of say oh yeah we get eventual consistency sber requires instant consistency you cannot have if you've got two clients one of them wants to open a f for read write you can't have another client opening that file for read right at the same time that's a recipe for disaster windows semantics don't allow it that means you've got to have

a an instantly consistent database State across every node in the cluster that's really hard I didn't write that some very clever people wrote that that sounds really hard I mean big database compan like Oracle I mean that that's hard for even them so well but or Oracle is is running yeah I I I don't know that much about the I mean Oracle I guess runs in clusters these days but that that kind of consistency is very very hard to do um oh I I should I should make a mention there's the the worldwide samb conference coming up uh samb x.org if we can put that

in the chat I forgot the dates it's next month's on the8 17th 18th oh God I should have written that let me just check that sbp.org thank you for giving the site because I was actually going to Google it and it came up a bunch of Adidas shoes oh no no [Music] you have to remember it was written for a different age where people didn't have you know there was one internet connection a dial up uh and so everybody shared stuff on the land and if you were in the building you were kind of authorized right you were on the land so um and so

essentially sb1 was unfixable um we we still ship an SMB server in sber smb1 server you can turn it off in fact it's turned off by default you can turn it on if you have to talk to Dos machines uh literally that's all it uses all is useful for the reason we haven't taken it out yet is because there are still people out there usually industrial control equipment whose whole thing runs on dos and it wants an smb1 connection seriously seriously so wow and there are there are still people out there running os2 that requires smb1 wow I was in fifth grade fifth grade yeah

so you know turn that off well it's it's off by default but um so the latest version is smb3 and it's pretty damn good in terms of security it's an encrypted transport um it's signed by default um it's now being ported to run of Google's new quick Internet Protocol uh um so normally you would not expose an SMB Port um which is Port 445 you would not expose that on the internet uh sb3 still runs over the same port so the problem for isps is they don't know whether you're running sb1 or sb3 sb3 is secure sb1 isn't so they normally just block the port

it's like don't do that uh it it's great for inside data centers and in local areas um but S&B of a quick um is pretty secure I mean it's it it's properly cryptographically reviewed by the Microsoft crypto people it's it's a good protocol it's a it's a very good protocol it's secure now of course the implementations can be a disaster you know we we've had the odd mistake here and there um you know some of which are my fault um some of which weren't uh it's it's a five million line C piece of C code you you're going to have some issues um so I

don't think we've had a really bad security issue for quite a few years the last one was uh caused a rewrite of our entire virtual F system interface internally oh that's that's another thing we have you can plug in backend file systems into samb so we we we can act as a Gateway um an SMB gateway to much more complex file systems on the back end so if you're a file if you're a distributor file system designer and you you want to have SMB uh you want to have Windows clients talk to it the easiest way to do that is to put a sber front

end in there and plug your back end into sber which you can do even with a proprietary file system you can have a proprietary back end into sber even though we're open source um so I would recommend that um yeah so it's it's secure implementations are hard um it's it's C code I mean if we were doing it now would we write write it in rusto go yes obviously but it's 30 years old you know and I mean you could rewrite it well so so people are uh starting to experiment with putting rust into s so there's a a great Susi engineer um David Moulder

who in his spare time he he does a lot of our authentication pieces he's actually working on um putting a rust implementation of some of the Microsoft as authentication protocols in DEC um I I'm kind of peripherally aware of that I you know you'd have to have him on to to give the the full details on that so it's very interesting stuff but yeah just like just like the lyit colonel is experimenting with putting rust in we are we are doing the same we'll probably if we're still around in 20 years time then we'll probably be mostly written in Rust I would guess but so

does that pretty much answer Greg's question about um windows isn't known for being a highly Os Oh a good question sorry I didn't yeah is someone more secure doing Windows File Services um that's that's hard to say Microsoft used to be very very insecure back in the early 2000s I would have said yes these days um Windows hasn't had an SMB security um problem for a while not the core file serving problem it has many other problems sure um one of the nice things about running samb on Linux is you can shut everything else down Windows has a bunch of services that like to keep

running all the time whereas for Linux you can run sambron Linux and you can literally cut shut down everything else and it's like this thing is just serving SMB and nothing else it's not even listening on any other ports it's hard to do that with Windows um I'm sure I'm sure people can do that people who know Windows much better than I because I haven't used Windows really professionally other than as a test Target for 20 years uh you can probably do the same with Windows but um the other thing that's I I think gives us an advantage is that our code is open and

people can look at it and find bugs and they do um you know we had um the son of a very famous hacker blanking on his name now uh he went into his father's business and he's been running basically penetration tests against sber and he found something that was was a cve um about a year or so ago we fixed it obviously but he was able to find that by literally looking at the code and figuring out where we messed things up you can't do that with Windows sure you can you can run probes against it you can fire random bites at things but it's

hard to actually say oh hang on a minute if I do this this and this I managed to get past a check and therefore I've gotten into something I shouldn't have um so yeah I I I I still think the fact that we're open and everybody can look at the code does ultimately make us more secure um I think yeah that's I think I do think that's one of the other there' been many studies either way I mean you know proprietary vendors fund studies that show that they're better open source vendors fun studies that show that they're better but you know just as a fundamental

belief in the scientific method of hey I'm showing you how I did this and and if you can find floors in it let me know and I'll fix them so um yeah so other than some Rust activity what other the things are on the road map for Samba coming up um so got to samb XP to see see the new things that are going on one of the things that we're trying to finalize is the uh SMB 3x extensions for Unix which will basically make running Linux to samb much more like a Unix file system so it will give um case sensitive file names um

a bunch of technical details that that people probably aren't that interested in but it will make it a much stronger competitor to NFS for Unix to Unix file sharing and there are there are some advantages to that because that means that you can have a uh one file serice that serves Windows Mac Linux anything you name it you know PlayStation 3 um you know um you don't have to open NFS and SB and try and make the two talk together you can just open SB and have everything talk to that and everything works um so yeah that's that's one of the important things um Ralph

from CET he's the their manager of their team he's working on um uh improving our distribu um database backend and pushing us into being more Cloud native using some of the cloud native Technologies he had a great presentation last year on that that shows actually how slow some of those databases are they they're not quite at the level that we require them for performance- wise because samb samb screams performance- wise we can saturate gigabit links easily I mean we're really really fast for bolt data transfer probably not so fast for metadata so NFS has the edge on know when you're doing large numbers of operations

in a directory but for bulk data we are really really fast uh other things that's going on Catalyst another s vendor they're doing an amazing work um they work a lot with the French government actually doing active directory improvements so they have actually found bugs in Microsoft security bugs in Microsoft's active directory um that we then submit to Microsoft and coordinated and fixing but so we're basically trying to make the whole ecosystem stronger and more more secure um and and remember SMB is everywhere you might think oh I don't use SNB for anything you do it's on your iPhone you're using it sorry you might

not know it but it's there I it kind of leads into my next question is things like iot have been around for a while but if you look at kind of the the new buzzword in the industry iot AIML all those things how does fit in with all these newer Technologies coming around what is what role does it play so so s is too heavyweight for tiny little sensor nodes uh iots uh the SMB protocol is it actually would do quite well there but its resource requirements are larger than um than those things tend to use so we we tend to fit uh the interesting

thing is all most of those Technologies based on Linux which does have an smv clent natively built into it Steve French and Microsoft maintains that um and a bunch of other people at Microsoft it's not usually turned on there's also an SMB server uh inside the Linux kernel as well which you know is still experimental people still working on it it's not usually turned on um it has a capability to do all those things people generally use web protocols for those so samry is mostly in the disappearing middleware so you know your iot thing would talk over the internet to something that may then be

using SMB and samb to store into a file system somewhere where it's actually being processed in the back end so it's you know um it it's used a lot for personal backup stuff or my photos are backed up to a to sash shares or my music plays off sambar stuff like that in the house and a lot of people that happens without them knowing it um it's just just how things work if they're not streaming off the internet if they're playing from some local server it's almost certainly sber andb in there somewhere um but it's yeah it it's not really an iot protocol I don't

think um but it's yeah it's it's invisible glue is is probably the best way to to look at it yeah how about an AI that always comes up a lot AI ml L the hype train live no I I'm sure it's great um um I I did actually ask um an AI I said write me an SMB server and it just to see what it would do and it actually got as far as opening the correct port and then pausing the first letters of the smb1 protocol SMB in the packet and then it said and the rest of it is left at an exercise to

the reader oh thank you um I mean it's just storage technology so AI uses storage um so you know the the the the way to of s SMB and samb is it's a storage technology tool and it's very fast for bulk data uh and it solves a set of problems that um most consumers don't see directly but a lot of it professionals do see and so it's a it's it's a very flexible tool in their toolbox for actually um solving very specific problems that you may have if you're work working on server side stuff it's the way I would think of it no printing please

no more printing okay printer on a parall I hate the printing C there are people who still use it we get bugs logged against it but you know we used to have a joke in the Amber team that any new member their first 10 bugs had to be printing bugs it's kind of like a hazing ritual you fix the first 10 books then he can go off and do something nicer um but we've kind of stopped that cuz he was pulling people off say you're running people away that's awesome yeah nobody wants to work on pry bugs I I mean remember this is an old

windows printing protocol that even Microsoft say hey don't use this anymore there's there internet printing protocol why don't you use that instead so you know the sambra is these days split into a bunch of different services and if you don't want that service just don't turn it on but the code is still there I mean we haven't ripped out and destroyed any of the code eventually we will get rid of the smb1 code um once once we have the full working posix to posix Unix to Unix smb3 at that point I'm going to do the work and actually remove that code and once we've got

it done we'll just we're right now at samb 4.20 we'll call ourselves samb five now with no smb1 yeah um it's disabled right now but it's it's it's like providing people you know with with a double edged sword you can still stick yourself in the foot with it right now you know just so it'd be nice to take that out and so that they can't do that Ned pile of Microsoft has this wonderful website where he says friends don't let friends use smv1 they really hate it they want to get rid of it so that's awesome so we're kind of coming up on time here

Jeremy this has been so awesome learning all about s is there anything else that you want our viewers uh to know about Soma the project and what it's doing um so it's it's useful if you're an IT professional you want to work with it um you can get um support from it from many of the Linux vendors you can get support for it there's a commercial site on the sble website that show you who you can get support from um if you're using if you're writing storage products or you're actually interested in active directory internals samb is a great place you're never going to see

the code for how active directory works from Microsoft at least not unless you join Microsoft but you can see all of it inside s so an active directory is still um quite popular still were very very widely used um and you know PE people still have a lot of thing uh a lot of infrastructure around active directory it's a great place to learn um and go to samb XP um join the conference even if you just haven't running in the background you're listening I guarantee you will learn a lot uh from that conference um so it's you know it's it's fun it's like it's like

working on the linit Kel it's not for everybody but people who enjoy it really love it so it it's a fun project I'm I'm proud to have been associated with it um and and I'm proud to have helped some of the engineers who now write the code much much better than I ever could and produce better better code smarter code um more more secure and safer code I I still hang out there just to I I I do paranoid code reviews so one of the things I I I still try and do is when new Engineers come in and they submit something I go through

them obsessively looking for integer overflow buffer overuns sometimes I find them and you know hey I've taught somebody something at that point so that's very cool yeah yeah so I been nice talking to you so so who gets the prize and why isn't it me disclaimer as an employee of CQ you are not eligible I mean I guess you could quit win the backpack and then come back don't do that no no no no you're not allowed to do so so did we make it to a thousand or are we we're close we got 961 wait what we just got 20 just right now sit

on this oh 61 no no no no okay I'm tripping I can't do math yes okay we're 961 thank you thank you I guess I could refresh it should be live but 961 is what I see yes I see that as well so that is exactly where we're at okay we're Trucking along man we're Trucking along so we're gonna take this 962 we got one more during this so we got dur I'm glad I could help shery thank jemy amazing so cool all right you guys well this has been an absolute pleasure we will definitely have you on again Jeremy you are a wealth of

information uh didn't even get into the lawsuit and all all the the horrors behind that so we get all kinds of stuff we didn't get to the lenx kernel hardly at all there's so much more mean this is like a whole series it could be h i I have so many stories around that so well take a little note on that we will come back we yeah what's it at the end of it Microsoft and Sam became firm friends that's the that's the sort of univ and they all lived happily ever after you know oracle CQ and Susa are all friends too well we are

now yes we are now you know yeah never have too many friends in the world so we always appreciate you know a good battle and a good resolution inde It's a small world it's a it is a very small all the same people here all right yeah I think we could go on and on forever but you guys thank you so much for watching thank you for subscribing make sure that you like and subscribe and you share this with your friends we are really excited to get to 10,000 subscribers so thank you for your help with that if you guys have any questions about what

it is that ciq does and how we're supporting the community and what are the products and services that we're providing for Enterprise Linux awesomeness in the world please reach out to us C iq.com and if you fill out any contact us message us I want more information that information comes to us typically the first stop is me so I would love to chat with you and I will get you on a meeting with whoever it is that you need to talk to and and also if you you have any questions that we didn't get to in this talk ask them on the comments below the

the video and I will hang out there and I will answer anything I can so Jeremy you're the best you're the best I love it and then also go to Som x.org register and and enjoy register and enjoy that's beautiful all right well thank you you have a wonderful afternoon evening morning and we will see you next time same time same place bye bye thank you everybody thanks Jeremy [Music] thanks he

Built for scale. Chosen by the world’s best.

2.75M+

Rocky Linux instances

Being used world wide

90%

Of fortune 100 companies

Use CIQ supported technologies

250k

Avg. monthly downloads

Rocky Linux

Have questions about your infrastructure?

Talk to a CIQ engineer about Rocky Linux, HPC, and AI infrastructure.

Talk to an Expert