Topic: Can't access SMEserver shares from windows 7 authentication problems

[NathanLundholm]

I can't access SMEserver shares from Windows 7.  I am having authentication problems.  Neither is in a domain, both are in the same workgroup, called WORKGROUP.  Username I type is admin.  Windows changes it to \\LIVINGROOMPC\admin.  Other computers on the network, such as BEDROOMPC and LAPTOP, have the same issue.  Before and after screencaps attached.

[mmccarn]

My up-to-date windows 7 workstation has no problem connecting to my up-to-date SME 9.2 server using windows networking (SMB).

Here are some things that might be causing your issue:

SME Server SMB/NMB Settings
Here are some notes on the smb, smbd and nmbd configurations on my server so you can compare them to yours.

If your SME is not already set as a workgroup and domain controller I would not change that setting before exhausting other options.

* server-manager -> configuration -> workgroup -> workgroup and domain controller
  * This is set to 'yes' on my server
  * the windows 7 system is *not* joined to the domain
  * the workstation workgroup is 'WORKGROUP'
  * the server's "windows workgroup" is not workgroup

Code: [Select]

# config show smb
smb=service
    DeadTime=10080
    KeepVersions=enabled
    OpLocks=enabled
    OsLevel=35
    RecycleBin=enabled
    RoamingProfiles=no
    ServerName=office
    ServerRole=PDC
    ShadowCount=10
    ShadowDir=/home/e-smith/files/.shadow
    UnixCharSet=UTF8
    UseClientDriver=yes
    Workgroup=myworkgroup
    status=enabled
# config show smbd
smbd=service
    TCPPorts=139,445
    access=private
    status=enabled
# config show nmbd
nmbd=service
    UDPPorts=137,138
    access=private
    status=enabled

Network Layout
My workstations are all on the same class C subnet as the SME server's LAN interface.  I have a dim memory that windows networking may not work across subnet boundaries without extra gymnastics. 

If your workstations are not on the SME server's LAN subnet, try putting something on that network to see if you can connect from there.

SMB v1 support on your workstations
Since Wannacry the standard advice has been to disable SMBv1 on all systems.  Unfortunately, SME still requires SMBv1 support.  If you followed a procedure intended to disable SMBv1 your workstations will not be able to connect to a SME server.

To get to the SME server using Windows networking, you would have to re-enable SMB on each workstation.  You can create firewall rules on each workstation to prevent SMB  to/from anyplace but the SME server.

There are lots of ways that SMBv1 can be disabled:
  * un-check 'File and Printer Sharing for Microsoft Networks' in the network adapter properties on the Windows systems
  * custom firewall rule(s) blocking traffic on ports 445 and 135-139
  * (I think, maybe) using registry edits

Antivirus software on your workstations
If you're running antivirus software on the windows systems it may have started blocking SMBv1

Switch Configuration
While unlikely for a home network, an intelligent switch can be configured to block SMB traffic in the switch itself.

DNS
The windows workstations need to be connecting to the LAN interface of the SME server.  If you are connecting by server name, the name used must resolve to the LAN IP.  If the name resolves to the WAN IP I don't think you'll be able to connect.

[janet]

NathanLundholm

Try this
https://wiki.contribs.org/Windows_7_Support

[NathanLundholm]

I tried both of these.  I know the server was set up right because it WAS working fine.  I had to reformat the Windows PC but I did not touch the SMEserver box.  So whatever the issue was is with the default Windows 7 settings.  I am beginning to think it's totally completely impossible.

[ReetP]

I'm a bit confused here.

First you say:

Other computers on the network, such as BEDROOMPC and LAPTOP, have the same issue.

Which seems to indicate BEDROOM and LAPTOP have the same logon issue as the 'Windows PC' that you had to reformat (for reasons unknown)

Can you take a step back and describe what happened prior to the machine requiring reformatting?

How many desktop/windows computers?

Were they all logging on ok?

Why were you using the 'admin' account to logon and not 'user' ?

When did you last update SME?

  I am beginning to think it's totally completely impossible.

"Once you eliminate the impossible, whatever remains, no matter how improbable, must be the truth."

Admittedly problems can seem impossible, especially with Windows. But logic dictates that is not true. There is a rational explanation somewhere.

So assuming it all worked before, what was changed and why?

[janet]

NathanLundholm

I tried both of these.  I know the server was set up right because it WAS working fine.

You need to be much more verbose & provide far greater details about your settings & exactly what you did when you "tried both of these".
As Reet has asked, you need to provide more details about your setup (Windows & SME), about why you reinstalled Windows, & what settings you selected when setting up Windows.

Please do not give us your believed solution, but give us details & let us decide or work out what is wrong.

From SME server please provide output of
config show smb
config show smbd
config show nmbd

From Windows show us a screen image of the
Control Panel, System, Advanced System Settings, Computer name (Tab)

The first screen image you gave is referring to a Domain: LIVINGROOMPC which suggests you did have a DOMAIN set up.
But your words suggest that is the name of the PC.

Do you know what you are doing ?
Are you a competent SME user & Windows user ?
Do you understand setting up DOMAINS (in Windows networking parlance) ?

Sorry to ask simple questions & query your skill level, but troubleshooting has to start with basics.

[NathanLundholm]

Yes, I am competent with Windows.  I am a beginner with SMEServer.  I don't know how to access the commandline so not sure how to get you those config files you asked for for the server.  For the Windows system, here are the screenshots you asked for.
Before the reformat, only living room PC was accessing shares on the server.  None of the other computers were.  I did get a virus off the web (thanks to my friend's son who can't touch my computers anymore) and I reformatted living room PC and it lost its ability to connect to shares on the server.  As you can see from the screenshots there ARE NO domains set up.

[TerryF]

A little more info will help, what role is your sme server in, server only, server-gateway?
What controls DHCP services on your network? SME server, modem/router, wifi router
Is your network setup using Cabling or Wifi
What are , Windows 7 PC IP, Sme Server IP, Gateway IP

I have a mixed windows setup, server in server/gateway,  windows 10,  windows 7 and an old Vista box all chug along happily only issues have been when Mr MS decided to bork windows 10 samba over 12 months ago, took nearly 12 months to be fully rectified. Windows 7 was not affected and I have never had an issue.

[janet]

NathanLundholm

I don't know how to access the command line so not sure how to get you those config files you asked for for the server........ As you can see from the screenshots there ARE NO domains set up.

To access command line log in to the SME server console (keyboard & monitor) as user root & use the admin password.
Issue the commands shown one by one, press Enter key after each.
Record the output.
type exit & press Enter key to exit

If you cannot directly access the server console, then you need to setup Putty to ssh into the server, then do as above.

Also you can access the server manager
https://SMELANIP/server-manager
or
https://yourdomain.xxx/server-manager

login as admin

Show us the output of the server configuration panel (which is towards the bottom of the server manager)

Sounds like you need to read the online manual to understand how to use SME server, see the contribs.org wiki
also accessible via Documentation link at top of forums

There are quite a few other questions that myself, ReetP & Terry have asked, you need to re-read what we asked & answer them all, one by one.

[NathanLundholm]

Server is in Server Only mode.  DHCP is provided by the router but none of the wired devices get their IP from DHCP.  The PC's IP is 10.1.1.1.  The server's IP is 10.0.0.2.  Subnet mask is 255.0.0.0.  Gateway is the router, 10.0.0.1.  All computers are wired LAN.  The only thing on Wifi are my smarthome devices that won't allow wires, because I prefer wires whenever possible.  Attached are results of server config panel and server config commands.

[NathanLundholm]

Interesting development.  As a test I JUST created a new user.  That was able to connect to the shares, share files in its own folder, etc.  Still can't do this with admin account.  This is not a viable option because I need the files stored on admin account but at least this tells us it's likely a problem with that account.

[janet]

NathanLundholm

The PC's IP is 10.1.1.1.  The server's IP is 10.0.0.2.  Subnet mask is 255.0.0.0.  Gateway is the router, 10.0.0.1.

You probably should change the PC IP's to 10.0.0.3, 10.0.0.4, 10.0.0.5 & so on (where these IP's are unused & undefined in SME server or router), with subnet mask of 255.255.255.0
While the above is OK, more typically in home situations the LAN IP range would be like 192.168.0.1 - 192.168.0.5 etc (or similar).

[ReetP]

Interesting development.  As a test I JUST created a new user.  That was able to connect to the shares, share files in its own folder, etc.  Still can't do this with admin account.  This is not a viable option because I need the files stored on admin account but at least this tells us it's likely a problem with that account.

It doesn't say why you can't connect with the admin account as I believe you normally can.

However, as a matter of principle you shouldn't use it.

Create an ibay/shared folder that is owned by a group say 'homeusers' and put all users who should have access in that group.

All this sort of stuff is in the manual.

I would also follow janets advice and nail down your networking. There isn't any real reason to use a 10.x network.

You also know you can't run 2 DHCP servers on the same network? So if it is enabled on the router you have disabled DHCP on SME?

Personally I disable DHCP on the router and use it on SME. Makes life much easier.

[NathanLundholm]

I know why you can only have one DHCP service.  I have it turned on on the router, and off on the SMEserver.  Furthermore, I have the networking the way I have it set for a reason.  I am kind of OCD and after the 10. the next number tells me which room of the apartment, the third one tells me which area of the room.  It has made it much easier troubleshooting networking.

Since other accounts can connect, how do I get my files that are now effectively locked up tight in the admin account?

[ReetP]

I know why you can only have one DHCP service.  I have it turned on on the router, and off on the SMEserver.  Furthermore, I have the networking the way I have it set for a reason.  I am kind of OCD and after the 10. the next number tells me which room of the apartment, the third one tells me which area of the room.  It has made it much easier troubleshooting networking.

Hmm - OK, wanted to check DHCP to eliminate it as a problem. I can't see you have a big enough apartment to warrant the fussing..... and it actually complicates rather than a simplifies. Hey ho.

Since other accounts can connect, how do I get my files that are now effectively locked up tight in the admin account?

I presume from this comment (because you aren't being very methodical and clear here) we have established that you can connect with other user accounts, but not the admin account, correct?

I also presume you put your files in the PERSONAL directory of the admin account, and did not set up a ibay/shared folder as per the documentation?

(There is a big difference between a users personal directory, and a shared directory/ibay)