Jump to content


Photo

set network password


  • Please log in to reply
35 replies to this topic

Re: set network password #21 speed

  • Senior Member
  • 420 posts

0
Neutral

Posted 1 March 2014 - 19:59

after reboot I get:

 

getsmbpassword: malformed password entry (no :)

 

wait I tried again, now it seems accepted


Edited by speed, 1 March 2014 - 20:00.


Re: set network password #22 speed

  • Senior Member
  • 420 posts

0
Neutral

Posted 1 March 2014 - 20:04

ok password is set now

box rebooted

 

however if I enter smb with root and password it still don't accept



Re: set network password #23 blzr

  • PLi® Core member
  • 2,270 posts

+118
Excellent

Posted 1 March 2014 - 21:34

just tested - it seems to work as expected here /?/...

after reboot I get:
getsmbpassword: malformed password entry (no :)
wait I tried again, now it seems accepted

maybe try to set the samba password once again, start with something simple, eg. 12345 or so, and check...
True sarcasm doesn't need green font...

Re: set network password #24 speed

  • Senior Member
  • 420 posts

0
Neutral

Posted 1 March 2014 - 23:00

I set a simple password: a

so I login with

user root

password a

but still no access?



Re: set network password #25 speed

  • Senior Member
  • 420 posts

0
Neutral

Posted 1 March 2014 - 23:54

cannot get it to work

 

I was thinking if I make new workgroup

can they find out what workgroup is being used?

 

so lets say

 

public: workgroup

 

secret: secretworkgroup



Re: set network password #26 speed

  • Senior Member
  • 420 posts

0
Neutral

Posted 11 March 2014 - 03:16

so any solution to get password working?

 

or if I make different workgroup, could someone inside the network find the workgroup?



Re: set network password #27 speed

  • Senior Member
  • 420 posts

0
Neutral

Posted 27 March 2014 - 02:13

still need to get this to work

anyone?

 

or If I make a diferent workgroup then the default one, lets say "openpli1" instead of the default "workgroup"

could another user find out this workgroup?



Re: set network password #28 WanWizard

  • PLi® Core member
  • 70,376 posts

+1,807
Excellent

Posted 27 March 2014 - 07:50

No.

 

You can make it difficult by disabling broadcasting all together, and you can set 'browseable = no' to hide the shares, but as long as Samba is running, using "\\<your-ip>\<your-share>" will work.

 

In the end this is an STB, not a NAS or a fileserver. It is not designed to do what you want.


Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Ultimate (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)

Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.

Many answers to your question can be found in our new and improved wiki.


Re: set network password #29 speed

  • Senior Member
  • 420 posts

0
Neutral

Posted 2 April 2014 - 01:54

yes something like this I was looking for

 

with no you mean If I make a different workgroup there is no way for them to find this workgroup?

 

cause this would be a good additional option then

 

thank you



Re: set network password #30 christophecvr

  • Senior Member
  • 3,131 posts

+140
Excellent

Posted 2 April 2014 - 08:01

For me it's now a couple of years I do not use samba anymore. I used it in the time I still runned windows pc's and linux on my network. I'm now windows free house.

 

What I well knew before is that If You changed the workgroup in you're network the workgroup was not find anymore. This till I shutdown every device using samba server (or the windows sharing) they needed to be off al at the same time. I mean not shuting down device 1 and restart it while device2 is running . All devices need to be set off (inclusif some cisco routers using samba as they exist).

 

Then restarts the devices one by one. After they are all restarted wait about 5 minutes. And you're samba (windows sharing network) should be online with the new workgroup.



Re: set network password #31 christophecvr

  • Senior Member
  • 3,131 posts

+140
Excellent

Posted 2 April 2014 - 14:51

I now just looked it up and tested samba network with password.

 

First a note. Does this add real security ? Wel no it does not.

To be secure You must be behind a firewall which block's the samba ports.

Obviousely you will in that case not be able to acces you're stb from a remote location using samba unless You are using vpn on you're router.

 

If You pass the smb and nmb(netbios) ports trough you're nat and firewall ....

 -The server will be under attack which may lead to have him down till even a general freeze off you're stb.

 -The day you self use the login from a remote place somwhere in the world, at the same time gives the password to the whole world.

 

However if You wan't you're samba with password on stb whitout installing the full samba I just made a small ipk with just the smbpasswd password utility for mips32el boxes (vuduo dm8000 as example)

 

How to proceed. ?

 

First copy the here included ipk file to you're box hdd or flash mem somewhere or mounted usb stick. In my example I used an usb stick mounted on /media/usb (use ftp or ... for that)

 

Then telnet You're box as example on my box :

 

Kill running samba server with :

 

root@vuduo2:~# sh /etc/network/if-down.d/01samba-kill

 

remove the existing smbpasswd file

 

root@vuduo2:~# rm -f /etc/samba/private/smbpasswd

 

remove the existing smb.conf file

 

root@vuduo2:~# rm -f /etc/samba/smb.conf

 

create a user password for root only if not already done ! (if you have already a password on you're box that is the one we will use later on with smbpasswd but you do not need to create one)

 

root@vuduo2:~# passwd (only if box did not had a pasword.)

 

Install the ipk package include here (I copied to /media/usb off my box)

 

root@vuduo2:~# opkg install /media/usb/enigma2-plugin-extensions-smbpasswd_cvr-r
0_mips32el.ipk

 

Now we go set the root password usable in samba NOTE !!! the pasword asked must match 100 % that one which is used as root password. There is no synchro utility in. It is case sensitif !!

 

root@vuduo2:~# smbpasswd -a root

on the question off New SMB password: type you're exact current root password. and retype same password on question Retype new SMB password:

You should now see answer :

startsmbfilepwent_internal: file /etc/samba/private/smbpasswd did not exist. File successfully created.
Added user root.
root@vuduo2:~#

type nox just exit to exit telnet.

root@vuduo2:~# exit

 

Now shut down you're box (with remote command). shutdown all You're pcs using samba.

 

Restart them all after they ALL have been shut downed.

 

Wait 5 minutes after they are all restarted. An it will work. Samba will ask password when You select the specific shared folder.

 

Note on a windows pc once You used a shared folder You will be able to acces them all. Whitout to have to login again (this with NO saving off password)

 

But if You reboot the windows pc You will have to login again (at least if you did not saved the password)

 

On linux example ubuntu if after closing the network share You always have to login again.

 

Also the changes off the smb.conf (included in ipk file)

 

[global]
   load printers = no
   guest account = root
   log file = /tmp/smb.log
   smb passwd file = /etc/samba/private/smbpasswd
   log level = 1
   security = user
   server string = OpenPLi %h network services
   workgroup = sspgroup
   netbios name = %h
   case sensitive=yes
   preserve case=yes
   short preserve case=yes
   socket options = TCP_NODELAY
   preferred master = no
   oplocks = no

[Root]
  comment = Everything - take care!
  path = /
  read only = no
  public = yes
  guest ok = no
  browseable = yes
  valid users = root
  force user = root

[Harddisk]
  comment = The harddisk
  path = /media/hdd
  read only = no
  public = yes
  guest ok = no
  browseable = yes
  valid users = root
  force user = root

 

Attached Files



Re: set network password #32 christophecvr

  • Senior Member
  • 3,131 posts

+140
Excellent

Posted 2 April 2014 - 15:06

Oeps the wrong work group slipped in into the ipk file. here that with pli's default workgroup.

 

[global]
   load printers = no
   guest account = root
   log file = /tmp/smb.log
   smb passwd file = /etc/samba/private/smbpasswd
   log level = 1
   security = user
   server string = OpenPLi %h network services
   workgroup = OpenPLi
   netbios name = %h
   case sensitive=yes
   preserve case=yes
   short preserve case=yes
   socket options = TCP_NODELAY
   preferred master = no
   oplocks = no

[Root]
  comment = Everything - take care!
  path = /
  read only = no
  public = yes
  guest ok = no
  browseable = yes
  valid users = root
  force user = root

[Harddisk]
  comment = The harddisk
  path = /media/hdd
  read only = no
  public = yes
  guest ok = no
  browseable = yes
  valid users = root
  force user = root

 

Attached Files



Re: set network password #33 johnmcmillan59

  • Member
  • 11 posts

0
Neutral

Posted 5 April 2014 - 15:22

I think you mean the http:// page.  There's a plugin called OpenWebif (blue button)  - Enable http authentication - YES.
the user name is root, p/w - (whatever you've set the root p/w to) 
Anyone accessing the box via the http port will have to login.  one time only, windows should prompt you to remember the p/w



Re: set network password #34 speed

  • Senior Member
  • 420 posts

0
Neutral

Posted 5 April 2014 - 19:24

no I ment the network share

anyone who I gave access to my internet, had access to my movies pictures etc and all files on my boxes

thanks cristphecvr I will try this when I have some spare time



Re: set network password #35 faht

  • Member
  • 8 posts

+1
Neutral

Posted 21 July 2016 - 19:03

I had a same problem, everyone could access my network.
 
I set in smb.conf :
 
[global]
   load printers = no
   guest account = root
   log file = /tmp/smb.log
   log level = 1
   security = share
   server string = OpenPLi %h network services
   workgroup = OpenPLi
   netbios name = %h
   case sensitive=yes
   preserve case=yes
   short preserve case=yes
   socket options = TCP_NODELAY
   preferred master = no
   oplocks = no

[Harddisk$]
  comment = The harddisk
  path = /media/hdd
  read only = no
  public = no
  guest ok = yes
  hosts allow = 192.168.0.14

 

So I can access from box only with ip:192.168.0.14 to my main box with this config. The directory Harddisk is also hidden.

Is this good solution?



Re: set network password #36 WanWizard

  • PLi® Core member
  • 70,376 posts

+1,807
Excellent

Posted 22 July 2016 - 11:33

That would block samba access from other devices than the one with that IP. 

 

It would stil require a root password to be set because there are other ways to access your files, like the web interface, or FTP.


Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Ultimate (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)

Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.

Many answers to your question can be found in our new and improved wiki.



6 user(s) are reading this topic

0 members, 6 guests, 0 anonymous users