Beryl AX, AR750s and SMB

Router
1

Hello, I have a Beryl AX and a AR750s. I want to use s usb drive as a samba share from each router.
For testing, I have set up a usb drive as a samba share to access from an android tablet using CIFS document provider.
When I attach the usb to the ar750s ext, and set up the access permissions , I can connect fine to the SMB share from the android tablet. When I set up the exact scenario on the Beryl AX, I get an access denied error when trying to connect to the samba share from the same tablet. I'm using the same USB drive, the same credentials and settings on both. Nothing I have tried works. I tried reflashing the firmware and settings from scratch with same result. I'm on the latest stable firmware on both.
Is there something different about the beryl AX and SMB access? Is it an SMB 2 vs 3 issue or something like that?

Thanks for any guidance.

4

Hi,

We checked the default Samba configuration on an MT3000 and found the following settings:

image
image774×112 3.92 KB

This means that SMB1/NT1 is disabled by default, and SMB encryption is required for client connections.
Since the same USB storage device, account credentials, and Android client work correctly with the AR750S, the “Access denied” error may be caused by the Android CIFS Document Provider being incompatible with the mandatory SMB encryption setting on the Beryl AX.
Please SSH into the Beryl AX and run the following commands to change SMB encryption from required to automatic negotiation:

sed -i 's/smb encrypt = required/smb encrypt = auto/g' /etc/samba/smb.conf.template4
reboot

After the device reboots, test the connection again.
If the issue persists, and the CIFS Document Provider only supports the older SMB1 protocol, you may temporarily change the minimum protocol to NT1 for compatibility testing:

sed -i 's/server min protocol = SMB2/server min protocol = NT1/g' /etc/samba/smb.conf.template4
reboot

Please note that NT1 corresponds to SMB1, which is an outdated protocol with significantly weaker security. We recommend trying the encryption adjustment first and enabling NT1 only temporarily within a trusted local network.

Thank you for your cooperation.

1 Like
How to safely edit samba config files?
5

Thanks for the detailed explanation. The first line fixed it (Auto encryption vs required).

It seems the CIFS provider doesn’t have a setting for required encryption, but it does have smb2.
I appreciate the fix, and the very detailed explanation.

1 Like