35 replies to this topic

[speed]

after reboot I get:

 

getsmbpassword: malformed password entry (no

 

wait I tried again, now it seems accepted

Edited by speed, 1 March 2014 - 20:00.

[speed]

ok password is set now

box rebooted

 

however if I enter smb with root and password it still don't accept

[blzr]

just tested - it seems to work as expected here /?/...

after reboot I get:
getsmbpassword: malformed password entry (no
wait I tried again, now it seems accepted

maybe try to set the samba password once again, start with something simple, eg. 12345 or so, and check...

[speed]

I set a simple password: a

so I login with

user root

password a

but still no access?

[speed]

cannot get it to work

 

I was thinking if I make new workgroup

can they find out what workgroup is being used?

 

so lets say

 

public: workgroup

 

secret: secretworkgroup

[speed]

so any solution to get password working?

 

or if I make different workgroup, could someone inside the network find the workgroup?

[speed]

still need to get this to work

anyone?

 

or If I make a diferent workgroup then the default one, lets say "openpli1" instead of the default "workgroup"

could another user find out this workgroup?

[WanWizard]

No.

 

You can make it difficult by disabling broadcasting all together, and you can set 'browseable = no' to hide the shares, but as long as Samba is running, using "\\<your-ip>\<your-share>" will work.

 

In the end this is an STB, not a NAS or a fileserver. It is not designed to do what you want.

[speed]

yes something like this I was looking for

 

with no you mean If I make a different workgroup there is no way for them to find this workgroup?

 

cause this would be a good additional option then

 

thank you

[christophecvr]

For me it's now a couple of years I do not use samba anymore. I used it in the time I still runned windows pc's and linux on my network. I'm now windows free house.

 

What I well knew before is that If You changed the workgroup in you're network the workgroup was not find anymore. This till I shutdown every device using samba server (or the windows sharing) they needed to be off al at the same time. I mean not shuting down device 1 and restart it while device2 is running . All devices need to be set off (inclusif some cisco routers using samba as they exist).

 

Then restarts the devices one by one. After they are all restarted wait about 5 minutes. And you're samba (windows sharing network) should be online with the new workgroup.

[christophecvr]

I now just looked it up and tested samba network with password.

 

First a note. Does this add real security ? Wel no it does not.

To be secure You must be behind a firewall which block's the samba ports.

Obviousely you will in that case not be able to acces you're stb from a remote location using samba unless You are using vpn on you're router.

 

If You pass the smb and nmb(netbios) ports trough you're nat and firewall ....

 -The server will be under attack which may lead to have him down till even a general freeze off you're stb.

 -The day you self use the login from a remote place somwhere in the world, at the same time gives the password to the whole world.

 

However if You wan't you're samba with password on stb whitout installing the full samba I just made a small ipk with just the smbpasswd password utility for mips32el boxes (vuduo dm8000 as example)

 

How to proceed. ?

 

First copy the here included ipk file to you're box hdd or flash mem somewhere or mounted usb stick. In my example I used an usb stick mounted on /media/usb (use ftp or ... for that)

 

Then telnet You're box as example on my box :

 

Kill running samba server with :

 

root@vuduo2:~# sh /etc/network/if-down.d/01samba-kill

 

remove the existing smbpasswd file

 

root@vuduo2:~# rm -f /etc/samba/private/smbpasswd

 

remove the existing smb.conf file

 

root@vuduo2:~# rm -f /etc/samba/smb.conf

 

create a user password for root only if not already done ! (if you have already a password on you're box that is the one we will use later on with smbpasswd but you do not need to create one)

 

root@vuduo2:~# passwd (only if box did not had a pasword.)

 

Install the ipk package include here (I copied to /media/usb off my box)

 

root@vuduo2:~# opkg install /media/usb/enigma2-plugin-extensions-smbpasswd_cvr-r
0_mips32el.ipk

 

Now we go set the root password usable in samba NOTE !!! the pasword asked must match 100 % that one which is used as root password. There is no synchro utility in. It is case sensitif !!

 

root@vuduo2:~# smbpasswd -a root

on the question off New SMB password: type you're exact current root password. and retype same password on question Retype new SMB password:

You should now see answer :

startsmbfilepwent_internal: file /etc/samba/private/smbpasswd did not exist. File successfully created.
Added user root.
root@vuduo2:~#

type nox just exit to exit telnet.

root@vuduo2:~# exit

 

Now shut down you're box (with remote command). shutdown all You're pcs using samba.

 

Restart them all after they ALL have been shut downed.

 

Wait 5 minutes after they are all restarted. An it will work. Samba will ask password when You select the specific shared folder.

 

Note on a windows pc once You used a shared folder You will be able to acces them all. Whitout to have to login again (this with NO saving off password)

 

But if You reboot the windows pc You will have to login again (at least if you did not saved the password)

 

On linux example ubuntu if after closing the network share You always have to login again.

 

Also the changes off the smb.conf (included in ipk file)

 

[global]
   load printers = no
   guest account = root
   log file = /tmp/smb.log
   smb passwd file = /etc/samba/private/smbpasswd
   log level = 1
   security = user
   server string = OpenPLi %h network services
   workgroup = sspgroup
   netbios name = %h
   case sensitive=yes
   preserve case=yes
   short preserve case=yes
   socket options = TCP_NODELAY
   preferred master = no
   oplocks = no

[Root]
  comment = Everything - take care!
  path = /
  read only = no
  public = yes
  guest ok = no
  browseable = yes
  valid users = root
  force user = root

[Harddisk]
  comment = The harddisk
  path = /media/hdd
  read only = no
  public = yes
  guest ok = no
  browseable = yes
  valid users = root
  force user = root

 

Attached Files

•  enigma2-plugin-extensions-smbpasswd_cvr-r0_mips32el.ipk   641.77KB   20 downloads

[christophecvr]

Oeps the wrong work group slipped in into the ipk file. here that with pli's default workgroup.

 

[global]
   load printers = no
   guest account = root
   log file = /tmp/smb.log
   smb passwd file = /etc/samba/private/smbpasswd
   log level = 1
   security = user
   server string = OpenPLi %h network services
   workgroup = OpenPLi
   netbios name = %h
   case sensitive=yes
   preserve case=yes
   short preserve case=yes
   socket options = TCP_NODELAY
   preferred master = no
   oplocks = no

[Root]
  comment = Everything - take care!
  path = /
  read only = no
  public = yes
  guest ok = no
  browseable = yes
  valid users = root
  force user = root

[Harddisk]
  comment = The harddisk
  path = /media/hdd
  read only = no
  public = yes
  guest ok = no
  browseable = yes
  valid users = root
  force user = root

 

Attached Files

•  enigma2-plugin-extensions-smbpasswd_cvr-r1_mips32el.ipk   641.76KB   14 downloads

[johnmcmillan59]

I think you mean the http:// page.  There's a plugin called OpenWebif (blue button)  - Enable http authentication - YES.
the user name is root, p/w - (whatever you've set the root p/w to) 
Anyone accessing the box via the http port will have to login.  one time only, windows should prompt you to remember the p/w

[speed]

no I ment the network share

anyone who I gave access to my internet, had access to my movies pictures etc and all files on my boxes

thanks cristphecvr I will try this when I have some spare time

[faht]

I had a same problem, everyone could access my network.
 
I set in smb.conf :
 
[global]
   load printers = no
   guest account = root
   log file = /tmp/smb.log
   log level = 1
   security = share
   server string = OpenPLi %h network services
   workgroup = OpenPLi
   netbios name = %h
   case sensitive=yes
   preserve case=yes
   short preserve case=yes
   socket options = TCP_NODELAY
   preferred master = no
   oplocks = no

[Harddisk$]
  comment = The harddisk
  path = /media/hdd
  read only = no
  public = no
  guest ok = yes
  hosts allow = 192.168.0.14

 

So I can access from box only with ip:192.168.0.14 to my main box with this config. The directory Harddisk is also hidden.

Is this good solution?

[WanWizard]

That would block samba access from other devices than the one with that IP. 

 

It would stil require a root password to be set because there are other ways to access your files, like the web interface, or FTP.