Skip to content
View in the app

A better way to browse. Learn more.

Unraid

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

SMB Shares still allow guess access - anyway to remove guest read access?

Featured Replies

I have upgraded my samba to version 3.6.8 as per another post hoping it would solve this issue. I have NFS and Samba active. the NFS Shares are set to private, and the SMB shares are set to secure. However when I access Tower from the networking in Windows 7 it doesnt ask me for a login i can read & write to the share. Thought I read somewhere that when someone set their SMB shares to Secure that windows prompted them for a password. Also as a note i went to my windows credentials and made sure nothing to do with Tower was in there, and im using simplefeatures and the SMB dropdown will not let me select private (which im assuming is not available for smb)

 

Any help would be appreciated as I have quite a few people that I would like not to be able to access my server, especially not be able to create and delete files. Also there is a Mac and every time it accesses the server it fills EVERY folder with hidden files (it wasnt fun to remove them)

 

EDIT:

So my windows user account had the same user name as the unraid user, will that let me log in without asking for a password? I just logged out with my account and used the admin account to try access the SMB shares and it didnt let me change anything, but it did let me view them. Is there a way to hide shares that dont have a user associated to them within unraid? i.e remove guest access?

  • Author

That's what i thought, but im not able to select Private under the SMB shares - security because it is greyed out. Is there a setting that I need to change to make it selectable?

That's what i thought, but im not able to select Private under the SMB shares - security because it is greyed out. Is there a setting that I need to change to make it selectable?

Are you using the free version of unRAID?
  • Author

Yes Im just setting up my server perfectly with 1 drive to make sure it is right for me before I get the license and add the other 6 drives. Is this a limitation of the free version?

Yes Im just setting up my server perfectly with 1 drive to make sure it is right for me before I get the license and add the other 6 drives. Is this a limitation of the free version?

I believe so.  I can do it with any of my paid versions.  Just didn't remember for sure if it was a limitation.
  • Author

Alright, I guess that makes sense. At least I know it will be possible. Also Im using NFS for my XBMC to access the server. If i select 'Secure' for security i believe that is read only for everyone, and if i select 'Private' it says "any NFS client with uid/gid matching a user on the server will be able to read/write any share" So I assume in the NFS rule i would have to put something like this?:

 

*(rw,no_subtree_check,insecure,root_squash,anonuid=XXX,anongid=XXX)

 

how do i find out the uid and gid of my xbmc machine?

 

Would this be the correct way to set up NFS only for my XBMC machine?

Sorry I only use SMB so can't tell you about NFS.

  • Author

Thanks for the clarification with the SMB issue though.

  • Author

Wow thanks so much dgaschk! appreciated solved pretty much all my issues with setting up. I set up my xbmc connection like you said (nfs://xbmc:[email protected]/mnt/user/Documentaries) but im not sure what to put in the NFS Security rules box in unraid. I currently have *(rw,insecure,all_squash) but xbmc still cant access it. Also i set up a user in unraid called xbmc, with xbmc as the password.

Where are you entering *(rw,insecure,all_squash)? Version 5 only lets you select Public, Secure, or Private.

 

 

NFS

 

The problem with NFS is that there is no user authentication.  Therefore, NFS has these restrictions with each of the security modes:

- if share Export is 'No' then share can't be accessed at all

- security mode 'Public': any NFS client can read/write the share (this is mapped to user 'nobody' as with Samba guest access).

- security mode 'Secure': any NFS client can read the share, no NFS client can write the share.  In other words, share appears to be read-only to all NFS clients.

- security mode 'Private': any NFS client with uid/gid matching a user on the server will be able to read/write any share.  It is not possible to restrict which users have only readonly access, so it's not really private in this sense.  Use this with caution.

 

NFS details

- we create a directory called /nfs which contains symlinks to each share marked as Export=Yes.  For each exported share, we create an entry in the exports file like this:

 

For mode Public:

/nfs/<name> *(rw,no_subtree_check,insecure,anonuid=99,anongid=100,all_squash)

 

For mode Secure:

/nfs/<name> *(ro,no_subtree_check,insecure,anonuid=99,anongid=100,all_squash)

 

For mode Private:

/nfs/<name> *(rw,no_subtree_check,insecure,root_squash)

 

In this mode the uid/gid of the NFS client must match one of the servers username uid/gid, but if it does, that client has full read/write access to the share.  This is because all users on the server are in the same group ('users'), and the group permission bits are set to 'rw'.

  • Author

The SimpleFeatures plugin lets you enter rules after you select private for a share under NFS. It seems to just add the lines to the default entry in the exports file. Should I just not enter anything?

Don't add anything. I don't use Simplefeatures so I've no idea what it does.

I thought NFS was still broken, I had nothing but issue with it.  Switched to SMB and things are better.

I thought NFS was still broken, I had nothing but issue with it.  Switched to SMB and things are better.

No, not broken.

  • Author

thanks again dgaschk will try it out tonight. I havent had any problems with NFS other than not being able to figure out how to access a private share properly. But the Secure share works great as a Read Only, its noticeably faster than when I was using SMB.

I thought NFS was still broken, I had nothing but issue with it.  Switched to SMB and things are better.

No, not broken.

 

I was using NFS with 4.7 and all was good, when I moved to v5RC8a, I started having the stale file handle issue.  Never researched it more than people saying it was still happening and to switch to SMB so I did...

  • Author

I thought NFS was still broken, I had nothing but issue with it.  Switched to SMB and things are better.

No, not broken.

 

I was using NFS with 4.7 and all was good, when I moved to v5RC8a, I started having the stale file handle issue.  Never researched it more than people saying it was still happening and to switch to SMB so I did...

 

What exactly is the stale file issue?

I thought NFS was still broken, I had nothing but issue with it.  Switched to SMB and things are better.

No, not broken.

 

I was using NFS with 4.7 and all was good, when I moved to v5RC8a, I started having the stale file handle issue.  Never researched it more than people saying it was still happening and to switch to SMB so I did...

 

Stale file handle messages can be normal depending the circumstances.

I thought NFS was still broken, I had nothing but issue with it.  Switched to SMB and things are better.

No, not broken.

 

I was using NFS with 4.7 and all was good, when I moved to v5RC8a, I started having the stale file handle issue.  Never researched it more than people saying it was still happening and to switch to SMB so I did...

 

Stale file handle messages can be normal depending the circumstances.

 

Even if it breaks access to the shares?  I was having to restart almost daily when eventually I had enough...I am just asking.  Like I said I never researched it too heavily

Archived

This topic is now archived and is closed to further replies.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.