after reboot I get:
getsmbpassword: malformed password entry (no
wait I tried again, now it seems accepted
Edited by speed, 1 March 2014 - 20:00.
Posted 1 March 2014 - 21:34
maybe try to set the samba password once again, start with something simple, eg. 12345 or so, and check...after reboot I get:
getsmbpassword: malformed password entry (no
wait I tried again, now it seems accepted
Posted 27 March 2014 - 07:50
No.
You can make it difficult by disabling broadcasting all together, and you can set 'browseable = no' to hide the shares, but as long as Samba is running, using "\\<your-ip>\<your-share>" will work.
In the end this is an STB, not a NAS or a fileserver. It is not designed to do what you want.
Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Ultimate (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)
Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.
Many answers to your question can be found in our new and improved wiki.
Posted 2 April 2014 - 08:01
For me it's now a couple of years I do not use samba anymore. I used it in the time I still runned windows pc's and linux on my network. I'm now windows free house.
What I well knew before is that If You changed the workgroup in you're network the workgroup was not find anymore. This till I shutdown every device using samba server (or the windows sharing) they needed to be off al at the same time. I mean not shuting down device 1 and restart it while device2 is running . All devices need to be set off (inclusif some cisco routers using samba as they exist).
Then restarts the devices one by one. After they are all restarted wait about 5 minutes. And you're samba (windows sharing network) should be online with the new workgroup.
Posted 2 April 2014 - 14:51
I now just looked it up and tested samba network with password.
First a note. Does this add real security ? Wel no it does not.
To be secure You must be behind a firewall which block's the samba ports.
Obviousely you will in that case not be able to acces you're stb from a remote location using samba unless You are using vpn on you're router.
If You pass the smb and nmb(netbios) ports trough you're nat and firewall ....
-The server will be under attack which may lead to have him down till even a general freeze off you're stb.
-The day you self use the login from a remote place somwhere in the world, at the same time gives the password to the whole world.
However if You wan't you're samba with password on stb whitout installing the full samba I just made a small ipk with just the smbpasswd password utility for mips32el boxes (vuduo dm8000 as example)
How to proceed. ?
First copy the here included ipk file to you're box hdd or flash mem somewhere or mounted usb stick. In my example I used an usb stick mounted on /media/usb (use ftp or ... for that)
Then telnet You're box as example on my box :
Kill running samba server with :
root@vuduo2:~# sh /etc/network/if-down.d/01samba-kill
remove the existing smbpasswd file
root@vuduo2:~# rm -f /etc/samba/private/smbpasswd
remove the existing smb.conf file
root@vuduo2:~# rm -f /etc/samba/smb.conf
create a user password for root only if not already done ! (if you have already a password on you're box that is the one we will use later on with smbpasswd but you do not need to create one)
root@vuduo2:~# passwd (only if box did not had a pasword.)
Install the ipk package include here (I copied to /media/usb off my box)
root@vuduo2:~# opkg install /media/usb/enigma2-plugin-extensions-smbpasswd_cvr-r
0_mips32el.ipk
Now we go set the root password usable in samba NOTE !!! the pasword asked must match 100 % that one which is used as root password. There is no synchro utility in. It is case sensitif !!
root@vuduo2:~# smbpasswd -a root
on the question off New SMB password: type you're exact current root password. and retype same password on question Retype new SMB password:
You should now see answer :
startsmbfilepwent_internal: file /etc/samba/private/smbpasswd did not exist. File successfully created.
Added user root.
root@vuduo2:~#
type nox just exit to exit telnet.
root@vuduo2:~# exit
Now shut down you're box (with remote command). shutdown all You're pcs using samba.
Restart them all after they ALL have been shut downed.
Wait 5 minutes after they are all restarted. An it will work. Samba will ask password when You select the specific shared folder.
Note on a windows pc once You used a shared folder You will be able to acces them all. Whitout to have to login again (this with NO saving off password)
But if You reboot the windows pc You will have to login again (at least if you did not saved the password)
On linux example ubuntu if after closing the network share You always have to login again.
Also the changes off the smb.conf (included in ipk file)
[global] load printers = no guest account = root log file = /tmp/smb.log smb passwd file = /etc/samba/private/smbpasswd log level = 1 security = user server string = OpenPLi %h network services workgroup = sspgroup netbios name = %h case sensitive=yes preserve case=yes short preserve case=yes socket options = TCP_NODELAY preferred master = no oplocks = no [Root] comment = Everything - take care! path = / read only = no public = yes guest ok = no browseable = yes valid users = root force user = root [Harddisk] comment = The harddisk path = /media/hdd read only = no public = yes guest ok = no browseable = yes valid users = root force user = root
Posted 2 April 2014 - 15:06
Oeps the wrong work group slipped in into the ipk file. here that with pli's default workgroup.
[global] load printers = no guest account = root log file = /tmp/smb.log smb passwd file = /etc/samba/private/smbpasswd log level = 1 security = user server string = OpenPLi %h network services workgroup = OpenPLi netbios name = %h case sensitive=yes preserve case=yes short preserve case=yes socket options = TCP_NODELAY preferred master = no oplocks = no [Root] comment = Everything - take care! path = / read only = no public = yes guest ok = no browseable = yes valid users = root force user = root [Harddisk] comment = The harddisk path = /media/hdd read only = no public = yes guest ok = no browseable = yes valid users = root force user = root
Posted 5 April 2014 - 15:22
I think you mean the http:// page. There's a plugin called OpenWebif (blue button) - Enable http authentication - YES.
the user name is root, p/w - (whatever you've set the root p/w to)
Anyone accessing the box via the http port will have to login. one time only, windows should prompt you to remember the p/w
Posted 21 July 2016 - 19:03
I had a same problem, everyone could access my network.
I set in smb.conf :
[global]
load printers = no
guest account = root
log file = /tmp/smb.log
log level = 1
security = share
server string = OpenPLi %h network services
workgroup = OpenPLi
netbios name = %h
case sensitive=yes
preserve case=yes
short preserve case=yes
socket options = TCP_NODELAY
preferred master = no
oplocks = no
[Harddisk$]
comment = The harddisk
path = /media/hdd
read only = no
public = no
guest ok = yes
hosts allow = 192.168.0.14
So I can access from box only with ip:192.168.0.14 to my main box with this config. The directory Harddisk is also hidden.
Is this good solution?
Posted 22 July 2016 - 11:33
That would block samba access from other devices than the one with that IP.
It would stil require a root password to be set because there are other ways to access your files, like the web interface, or FTP.
Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Ultimate (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)
Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.
Many answers to your question can be found in our new and improved wiki.
0 members, 5 guests, 0 anonymous users