This is the old XigmaNAS forum in read only mode,
it will taken offline by the end of march 2021!



I like to aks Users and Admins to rewrite/take over important post from here into the new fresh main forum!
Its not possible for us to export from here and import it to the main forum!

Unauthorised shares.

CIFS/SMB network sharing.
Forum rules
Set-Up GuideFAQsForum Rules
Post Reply
paulyvee
NewUser
NewUser
Posts: 1
Joined: 26 Jun 2012 18:22
Status: Offline

Unauthorised shares.

Post by paulyvee »

I have had a NAS box in operation for some time but a power failure crashed the system.
As part of the "rejouvenation" I upgraded to the latest version 636 from the previous version 121 and have had no problems apart from having to remove drives and scan them with a UFS reader on a Win7 machine then return the recovered info back to the NAS box - having cleaned and reformatted the drives on the NAS box.
Not a real problem - just a bit of a time consumer.
Anyway, at the same time I have restructured the shares and am using SMB to link to all (WIN based) machines on the network.

The system is using an old Hewlet Packard motherboard
and a Q-Tec 340R IDE interface and have 8 drives installed - drive 0 is the system drive and 7 others
It is a bit slow but more than adequate for my needs.
Three possibly four problems exist.
1)
I am unable to log off the NAS box on a win machine without rebooting OR changing user.
2) interrelated with 1)
The Nas box does not show up as attached in the windows "Network neighbourhood"" but always at the bottom of the screen - present.
Neither problem is as real headache but would be useful.
Now the real queries.
a)
Is it possible to prevent any user unauthorised from using a SMB share seeing the presence of that share.
ie
USER 1 has unlimited access and can seen drives 1 through 7
USER 2 has restricted access - not allowed to use drive 7 and can only see drives 1 through 6 so doesn't even know about 7
The idea is to split drive 7 into 2 partitions, partition 1 being accesstble to all and partition 2 invisible to all except authorised.
That would mean that if you looked on screen you would see 7 drives - albeit 1 would be smaller so would be unlikely to start hacking as a physical check would - sure enough" reveal 7 drives.
b)
I have just started playing around with XBMCbuntu as a video client but am having problems logging on.
Not quite sure how to go about it as although I have been playing with Ubunto and FreeBSD for a while I admit it is only playing - not yet got my hands dirty.

Paulyvee

danic
Starter
Starter
Posts: 30
Joined: 26 Jun 2012 21:07
Status: Offline

Re: Unauthorised shares.

Post by danic »

I am unable to log off the NAS box on a win machine without rebooting OR changing user.
Thats normal. Windows remembers Login info until you end the session (Logout or reboot)
Look into 'net use' commands to force a disconnect.
The Nas box does not show up as attached in the windows "Network neighbourhood"
Make sure the client and the server are in the same workgroup. Also enable 'Local Master Browser' in the CIFS/SMB section, if no other windows file servers are on the network.
Is it possible to prevent any user unauthorised from using a SMB share seeing the presence of that share.
ie
USER 1 has unlimited access and can seen drives 1 through 7
USER 2 has restricted access - not allowed to use drive 7 and can only see drives 1 through 6 so doesn't even know about 7
The idea is to split drive 7 into 2 partitions, partition 1 being accesstble to all and partition 2 invisible to all except authorised.
That would mean that if you looked on screen you would see 7 drives - albeit 1 would be smaller so would be unlikely to start hacking as a physical check would - sure enough" reveal 7 drives.
You don't have to make two partitions. IMO two folders is easier to make than two partitions. Then share each folder with appropriate security settings. Under the private share settings uncheck 'set browseable' and in the 'Auxiliary parameters' box put 'valid users = user1'. This should only allow user1 access to that specific share and can only be accessed directly (ex. \\server\drive7private\)
Please refer to smb.conf documentation for more options.
I have just started playing around with XBMCbuntu as a video client but am having problems logging on.
I use XBMC as well, but all my shares are guest logins. Maybe allow guests for your Video/Music shares. Can't help much here. sorry.

Danic
Danic
Nas4Free - AMD X4 960T - GIGABYTE 990FXA-UD3 - 16GB RAM - IBM M1015/IT - Intel RS2WC080/IT- 6x 3TB - 4x 320GB - 3x 640GB - 120GB SSD - 240GB SSD

Post Reply

Return to “CIFS/SMB (Samba)”