My Cloud Ex2 Ultra
- Disabled NFS
- Had to remove group due to conflicting polices for read / write where group would take priority over user defined permission
- Verified SMB 3 was only selected
- Verified only NTLM2 selected
- Enabled Verbose logs
Rouge DHCP Server
- Found and eliminated that and made a bridge (due to being a VM)
Other Fun Actions:
-
- Reviewing packet captures
-
- Reviewing Event viewer for “SMBClient” logs
-
- ssh into My Cloud Ex2 Ultra and review Samba configuration file and detailed logs
- Dreading anyone that says let’s downgrade to SMB 2 or even SMB 1 in 2024 or use NTLM 1
Windows 11:
- Windows Updates
- Clear Credential Manager (if attempted for prior testing)
- Guest access in SMB2 and SMB3 is disabled - Windows Server | Microsoft Learn
- Computer Configuration > Administrative Templates > Network > Lanman Workstation (Enabled)
- Local Security Policy
- LAN Manger Authentication Level = Send NTLMv2 response only and refuse LM & NTLM
- Minimal session security for NTLM SSP (both options) NTLMv2 and 128 checked
- Useful command to speed up troubleshooting to avoid reboots
- net stop workstation /y
- net start workstation
- Adjusted network profile from public to private
- Downgraded from Microsoft to local account
- Removed PIN
Mac: [UPPERCASEUSERNAME]@[Server_IP]/[Share_name]
Mac supports SMB3. Example: RYAN@127.0.0.1/share
Still not certain why username must be upper case in mac when server reads all text for username as lower case, but it works. And, it does not work if it’s lowercase.
- FYI The setting in MAC (the Apple, not Media Access Control) for file share IS ONLY if you want MAC to be a server (not need to enable that for client mode only!)
- Clear Keychain for prior saved password before attempting again
Sources:
https://help.ubuntu.com/community/Fstab
https://ubuntu.com/server/docs/how-to-mount-cifs-shares-permanently
https://www.linode.com/docs/guides/linux-mount-smb-share/
Below is a heavy fork of the last reference
Phase 0 – Get ready
sudo apt-get update && sudo apt-get upgrade
sudo apt update && sudo apt upgrade
// Reboot of recommended
sudo apt install cifs-utils
fuser
// Terminal should usage / options for command if installed in output stream
Phase 1 – Test Ability to Connect to Samba SMB share
// denote holding a variable of your choosing, do not enter these in the terminal
sudo mkdir /mnt/[smb_share_name]
sudo mount -t cifs -o user=[user_name] //[smb_server_ipv4]/[smb_share_name] /mnt/[smb_share_name]
Enter password when prompted.
If error review data input or various error logs, hence the point of this stage happy hunting!
sudo umount -t cifs /mnt[smb_share_name]
Phase 2 – Create Credentials File
// Store where needed for business or personal needs and attempt to restricted access
sudo nano ~/.credentials
Line 1: username=[smb_user_name]
Line 2: password=[smb_user_name_password]
// Save changes and exit file
// This guide is designed for the Western Digital Hard drive so doesn’t not have Domain in home configuration.
sudo chown [linux_active_user_name]:~/.credentials
sudo chmod 600 ~/.credentials
sudo mount -t cifs -o user=[smb_user_name] //[smb_server_ipv4]/[smb_share_name] /mnt/[smb_share_name]
If error review data input or various error logs, hence the point of this stage happy hunting!
sudo umount -t cifs /mnt[smb_share_name]
Phase 3 - /etc/fstab
sudo nano /etc/fstab
// Review Fstab - Community Help Wiki
// Review https://ubuntu.com/server/docs/how-to-mount-cifs-shares-permanently
// Add a new line item in the most logical spot
//[smb_server_ipv4]/ [smb_share_name] /mnt/[smb_share_name] cifs credentials=~/.credentials,uid=1000,gid=100 0 0
// Save changes and reboot changes
If error review data input or various error logs, hence the point of this stage happy hunting!
