Cannot get SMB2/3 to work

hello, thanks

Method 1: Samba 2.0 (SMB2.0) Support:
this did not work

sed -i 's/security = share/security = user/' /etc/samba/smb.conf.template
/etc/init.d/samba restart

and this did not work,
editing /etc/samba/smb.conf.template with

min protocol = SMB2
max protocol = SMB3

and then

/etc/init.d/samba restart

I seem to recall that I had to make the same changes to the /etc/samba/smb.conf file also, then restart samba.

I do not work for and I am not directly associated with GL.iNet

1 Like

your router version maybe is 3.0, the 3.0 router version use samba server is 3.6, it can’t support the SMB2, only support SMB1. set min protocol=SM2 not work. GL AXT1800 router version is 4.0, it support the SM2 default

hi,

are you sure about that?

Samba 3.6 includes the first Free Software implementation of Microsoft’s new SMB2 file serving protocol.

thanks but still not working and to make it more complex, now there is an open question:

with the official glinit firmware 3.212, using default samba 3.6,
is SMB2 supported or not supported?

in the mean time, tried this and still now working
— updated these two files
/etc/samba/smb.conf.template
/etc/samba/smb.conf

with

       min protocol = SMB2
       max protocol = SMB3

and then did /etc/init.d/samba restart
and then rebooted and hard powered off

on the client, testing on two machines, both W11.PRO
and get this result

net use \\192.168.8.1\koq
System error 384 has occurred.

You can't connect to the file share because it's not secure. This share requires the obsolete SMB1 protocol, which is unsafe and could expose your system to attack.

smb.conf

[global]
	netbios name = GL-AR750S 
	display charset = UTF-8
	interfaces = lo br-lan 
	server string = GL-AR750S-326
	unix charset = UTF-8
	workgroup = WORKGROUP
	browseable = yes
	deadtime = 30
	domain master = yes
	encrypt passwords = true
	enable core files = no
	guest account = nobody
	guest ok = yes
	invalid users = root
	local master = yes
	load printers = no
	map to guest = Bad User
	min protocol = SMB2
	max protocol = SMB3
	min receivefile size = 16384
	null passwords = yes
	obey pam restrictions = yes
	os level = 20
	passdb backend = smbpasswd
	preferred master = yes
	printable = no
	security = user
	smb encrypt = disabled
	smb passwd file = /etc/samba/smbpasswd
	socket options = TCP_NODELAY IPTOS_LOWDELAY
	syslog = 2
	use sendfile = yes
	writeable = yes

[homes]
	comment     = Home Directories
	browsable   = no
	read only   = no
	create mode = 0750

[GL-Samba]
	path = /mnt/sdb1
	read only = yes
	guest ok = yes
	browseable = yes

[koq]
	path = /root/rclone/mountpoints/main/01
	read only = yes
	guest ok = yes
	browseable = yes

smb.conf.template

[global]
	netbios name = |NAME| 
	display charset = |CHARSET|
	interfaces = |INTERFACES|
	server string = |DESCRIPTION|
	unix charset = |CHARSET|
	workgroup = |WORKGROUP|
	browseable = yes
	deadtime = 30
	domain master = yes
	encrypt passwords = true
	enable core files = no
	guest account = nobody
	guest ok = yes
	invalid users = root
	local master = yes
	load printers = no
	map to guest = Bad User
	min protocol = SMB2
	max protocol = SMB3
	min receivefile size = 16384
	null passwords = yes
	obey pam restrictions = yes
	os level = 20
	passdb backend = smbpasswd
	preferred master = yes
	printable = no
	security = user
	smb encrypt = disabled
	smb passwd file = /etc/samba/smbpasswd
	socket options = TCP_NODELAY IPTOS_LOWDELAY
	syslog = 2
	use sendfile = yes
	writeable = yes

good news, i have achieved my goal

by the way, my goal is to:
— run rclone mount on the router - which is working well.
— using samba, share the mount over the lan.

my solution:
— remove samba3.6
— install samba4
— live long and prosper

thanks to all for the suggestions, very helpful

root@GL-AR750S:~# smbstatus

Samba version 4.11.17
PID     Username     Group        Machine                                   Protocol Version  Encryption           Signing
----------------------------------------------------------------------------------------------------------------------------------------
23403   nobody       nogroup      192.168.8.157 (ipv4:192.168.8.157:59916)  SMB3_11           -                    -
1 Like

On firmware 4.x it is samba4.0