Koozali.org: home of the SME Server

access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse

Offline j-doe-123

  • 1
  • +0/-0
access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« on: October 04, 2021, 06:42:41 PM »
Hi all I seach for this workaround:
„#4 I can not access to my ibay from my windows XP.“
Written by „Jean-Philippe Pialasse“

I want to use the SME server 10 as an SMB v1tov3 proxy to access a Windows File Server 2019.
My Sme server is insatlled in "Server only Mode"!

I have control machines running on XP and getting their data from the file server.
In the future I want to get them from a Windows file server.
For this I mount from the SME → Windows via smbv3 into an I-Bay.
I have already mounted the Win server, but I can't get access to SME via SMB1!

I am aware of the danger and want to isolate the xp machines.

Does anyone have this workaround for me?
#4 I can not access to my ibay from my windows XP. (Jean-Philippe Pialasse)

Windows XP and Windows 7 are software no longer supported by Microsoft, you are encouraged to migrate. That said, they are expecting the SMB1 protocol, and SME 10 uses SMB2 and SMB3. A workaround could be to allow SMB1 on the server, but this is at your own risks.

Thanks in advanced

Greetings j-Doe

Translated with www.DeepL.com/Translator (free version)

Online TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #1 on: October 05, 2021, 12:30:57 AM »
https://wiki.koozali.org/Windows_10_Support#Notes_concerning_Window_10_and_SME_Server_10

and worthwhile reading thyis Bug as well

https://bugs.koozali.org/show_bug.cgi?id=9555

I suspect you will then have an issue getting to the win server as it will want smb2-3 and you will have set sme10 to use smb1, dont have access to a win server to test it..

wsdd contrib does a good job BUT that prorocol was introduced with win 7

Added:  config setprop smb ServerMinProtocol NT1  and  config setprop smb ClientMinProtocol NT1 refer wiki for expand template etc
« Last Edit: October 05, 2021, 12:53:46 AM by TerryF »
--
qui scribit bis legit

Online TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0

Online TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #3 on: October 05, 2021, 12:54:36 AM »
and just to add, security is compromised, all at your own risk
--
qui scribit bis legit

Offline artike01

  • 2
  • +0/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #4 on: March 25, 2022, 12:39:00 PM »
To access a SME 10 server with Windows XP you have to do the following:

config setprop smb ServerMinProtocol NT1
config setprop smb ClientMinProtocol NT1

(This steps mentioned TerryF already)

Additionally you have to allow the NTLM authentification on the server
nano /etc/e-smith/templates/etc/smb.conf/10globals
add the following entry below [global]
ntlm auth=yes

exit nano and safe the file

Update the configuration:
expand-template /etc/smb.conf
service smb restart


Please note that NTLM and CIFS are unsecure, any configuration is on your own risk.

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #5 on: March 25, 2022, 01:08:56 PM »
To access a SME 10 server with Windows XP you have to do the following:

config setprop smb ServerMinProtocol NT1
config setprop smb ClientMinProtocol NT1

(This steps mentioned TerryF already)

Additionally you have to allow the NTLM authentification on the server
nano /etc/e-smith/templates/etc/smb.conf/10globals
add the following entry below [global]
ntlm auth=yes

exit nano and safe the file

Update the configuration:
expand-template /etc/smb.conf
service smb restart


Please note that NTLM and CIFS are unsecure, any configuration is on your own risk.

do not edit template content. they are rpm owned and will be overwritten on next update. 

Offline artike01

  • 2
  • +0/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #6 on: March 25, 2022, 01:42:53 PM »
do not edit template content. they are rpm owned and will be overwritten on next update.

Yes, that is right the file have to be saved under /etc/e-smith/templates-custom/etc/smb.conf/
I forgot this, I think this is the right directory now, otherwise please correct me.

For further information and best practice: https://wiki.koozali.org/Template_Tutorial#smb.conf
« Last Edit: March 25, 2022, 01:59:21 PM by artike01 »

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #7 on: March 25, 2022, 06:57:33 PM »
Quote
I want to use the SME server 10 as an SMB v1tov3 proxy to access a Windows File Server 2019.

It isn't just a case of accessing v10 with old unsupported clients (see my signature about unsupported systems)

The OP presumably wants to mount the 2019 server on v10, and then share the mounts to his unsupported clients.

The smb server & clients can have different configs if I remember correctly.

This may be possible. However, I'm pretty sure it isn't going to end well.

It's really time to move on.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #8 on: March 26, 2022, 12:07:10 AM »
indeed configuration of client and server side are independant. 

smb1 is even currently being removed from the code source of samba.

saying the smb1 server will be isolated is only worth if we have a dedicated network without inrerconection to another network or internet.

so while it is still possible to do. it is not something one should do.
If you can not pay for a win10 licence just put a linux on those old pc. You could be astonished how they will behave better and how most needs are fulfilled with chromium / firefox and libreoffice. 

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #9 on: March 26, 2022, 02:28:14 AM »
I think like main the issue is this:
Code: [Select]
I have control machines running on XP
Presumably no update for their control software which probably drives expensive hardware.

Unfortunately they have been robbed by the manufacturers.

As you say JP, the only way to run XP is in a totally isolated environment.

If it connects to another computer that connects anywhere else it is vulnerable.

There is no easy answer here.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline k_graham

  • ***
  • 146
  • +0/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #10 on: June 05, 2022, 05:32:14 AM »
[quote author=j-doe-123 link=topic
Windows XP and Windows 7 are software no longer supported by Microsoft, you are encouraged to migrate. That said, they are expecting the SMB1 protocol, and SME 10 uses SMB2 and SMB3. A workaround could be to allow SMB1 on the server, but this is at your own risks.
[/quote]

I have the same issue that I can not run XP to see the SME 10 to run 2 networked DOS programs and a RIP and Platemaker for a press.

It seems I have 3 choices for the networked DOS programs,
1 is to buy and use more expensive Windows 10 business machines with Hyper V., I have that working on a Windows 10 machine or
 
2. attempt to convert Windows XP machines to use some type of Linux and run some sort of DOS virtual machine, but as the DOS program needs the network is Linux able to do that? I was attempting with Linux Mint today and aside from extremely slow load times never actually got a decent working environment to try adding a DOS virtual machine.  Any suggestions on a slim Linux and if the DOS virtual machine will be able to use a drive on the SME 10 server?

3. Stay with SME 9. The XP units do not connect to the internet, only Windows 10 hooks to internet & or receives any USB's, the drawback to this is of course the server must rely on Windows 10 antivirus where as if SME 10 can have SMB1 activated then at least it could run the Clam AV utility to check for possible infections, of which clam updates are not available on SME9.
 
Is a workaround  to allow SMB1 on SME10 known or posted anywhere?

Thanks, Ken



Online TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #11 on: June 05, 2022, 10:15:05 AM »

Is a workaround  to allow SMB1 on SME10 known or posted anywhere?

Thanks, Ken

Answer is in first couple of replies of the original forum post here. With all of the issues that that creates.
--
qui scribit bis legit

Offline k_graham

  • ***
  • 146
  • +0/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #12 on: June 14, 2022, 08:07:15 AM »
Answer is in first couple of replies of the original forum post here. With all of the issues that that creates.

A belated thanks. Regretably I find Microsoft seems to not honor their licences on the XP or Windows 7 as the register servers don't appear to work any more, thus only if one has a still functioning software may they make use of it. I assume this may be a problem for people wanting to use a HyperV instance as well in 10 or 11.

We have a couple units on Windows98, is their a chance anyone has been able to get it to work on SME10 as it works on SME9.

Thanks,
Ken Graham

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: access to I-Bay windows XP SME 10 / Jean-Philippe Pialasse
« Reply #13 on: June 14, 2022, 09:19:29 AM »
We have a couple units on Windows98, is their a chance anyone has been able to get it to work on SME10 as it works on SME9.

Same answer as Terry gave you above.

However note that SME 10 goes EOL in 2024 and SME 11 and beyond almost certainly will have no support for SMB 1 and you should prepare accordingly.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation