Beryl AX, AR750s and SMB

Hi,

We checked the default Samba configuration on an MT3000 and found the following settings:

This means that SMB1/NT1 is disabled by default, and SMB encryption is required for client connections.
Since the same USB storage device, account credentials, and Android client work correctly with the AR750S, the “Access denied” error may be caused by the Android CIFS Document Provider being incompatible with the mandatory SMB encryption setting on the Beryl AX.
Please SSH into the Beryl AX and run the following commands to change SMB encryption from required to automatic negotiation:

sed -i 's/smb encrypt = required/smb encrypt = auto/g' /etc/samba/smb.conf.template4
reboot

After the device reboots, test the connection again.
If the issue persists, and the CIFS Document Provider only supports the older SMB1 protocol, you may temporarily change the minimum protocol to NT1 for compatibility testing:

sed -i 's/server min protocol = SMB2/server min protocol = NT1/g' /etc/samba/smb.conf.template4
reboot

Please note that NT1 corresponds to SMB1, which is an outdated protocol with significantly weaker security. We recommend trying the encryption adjustment first and enabling NT1 only temporarily within a trusted local network.

Thank you for your cooperation.

1 Like