NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
DOS net use access denied to share
Hello,
I'm trying to map a share from our new ReadyNAS 3138 with DOS 6.22 running on a CNC machine but have access denied issues.
The machine was setup and on the network just fine with our previous server. I've mapped the ReadyNAS IPs to server names in Hosts and LMHosts and I'm able to ping the ReadyNAS. I'm able to map the share using net use under CMD from windows 10 workstations.
I've create a user and tried with the specific user's credentials but again received an access denied error. Within the ReadyNAS I've got the share setup with everyone (and tried adding anonymous) permissions along with everyone setup under network access and file access permissions but still receive the access denied error. On boot the error is a "you were logged on but have not been validated by the server" and then an "invalid password" error. The password used is correct.
From DOS I've got net setup with user name, workgroup, correct driver and TCP/IP protocol. Autoexec.bat has the proper net use command. I've tried using net use with the IP but it prefers the server name.
Any ideas?
12 Replies
Replies have been turned off for this discussion
CNC_Mike wrote:I'm trying to map a share from our new ReadyNAS 3138 with DOS 6.22
Have you installed SMB plus on the NAS? That would let you confirm that SMB 1/CIFS are enabled.
Also, make sure the username and password are no longer than 8 characters (which I think is the limit for DOS 6.22). Avoid special characters and punctuation in the password.
And you are sure that the old server was using NetBIOS over TCP/IP, not over NetBEUI or some other protocol? It has been a long time since I messed with networking on a DOS machine, but not as long as some. We also still have DOS based equipment where I work. But when they blocked all the protocols that DOS supports on the corporate network, I had to change them to dual boot with a server upload/download performed via Windows and the machine software run in DOS.
What does NETSTAT -A return? Can you turn echo on during the execution of your AUTOEXEC.BAT and post a screen dump of when the networking commands are executed (obfuscating the user name and password if you need to)?
Have you determined if your CNC software will run in FreeDOS or "DOS7.1"? Both have better networking than DOS6.22. FreeDOS is, as the name suggests, open source and free. "DOS7.1" is extracted from Windows 95/96/ME, so you can legally use it if you still have a license for any of those. There are batch files around that will extract it from those install disks, but you can find locations from which to download it, too.
I'm using NetBios over TCP/IP (listed as Microsoft TCPIP in net setup).
We don't have enhanced commands in DOS on most of our DOS 6.22 based CNC machines - unfortunately, no NETSTAT.
Net use paths are F: \\server_name\share. I tried a few different ways to set this up and found DOS prefers server names (does not like IP address) and the user must be setup under C:\NET\setup rather than added into the net use command (although I can set a password with net use).
Upgrading DOS on these machines is not an option.
Thanks, I installed SMB plus and SMB 1 is listed as the minimum protocol. I also tried changing the encryption and signing settings but was unsuccessful.
I've got the user name at a 4 character name and the password at 3 character string. All characters are simple and recognizable by DOS.
Sorry for the extra photo posts- they are not needed.
Looks like it's an issue resolving host names. Even with entries in Hosts and LMHosts I'm unable to ping server names (ips ping fine). Pinging local host is able to resolve so Hosts file is working.
Ok - Strangely enough, If I connect to the RN3138 server from the cnc mill using the credentials from a w10 workstation on the network, I'm able to access the share. I don't have the RN3138 server setup with this user (but it has connected to the server), so it must be recongnizing this login. If I try to use any account that's not on on the network or any registered account I get access denied.
There's an issue with folder names that contain numbers- the folder names are not correct.
I'm leaning toward an encryption issue- it's my understanding that when networking the cnc to w10, file sharing must be set to 40-56 bit encryption. The closest I see in the ReadyNAS os6 is system > settings > services > SMB > Legacy Windows Discovery, but I have that checked. SMB encrypt (auto / mandatory / disabled) in SMB Plus doesn't have an impact.
CNC_Mike wrote:
Ok - Strangely enough, If I connect to the RN3138 server from the cnc mill using the credentials from a w10 workstation on the network, I'm able to access the share. I don't have the RN3138 server setup with this user (but it has connected to the server), so it must be recongnizing this login. If I try to use any account that's not on on the network or any registered account I get access denied.
Is the NAS set up to use Active Directory? I'm not sure what you mean by a "registered account", or one that is not on the network.
CNC_Mike wrote:
it's my understanding that when networking the cnc to w10, file sharing must be set to 40-56 bit encryption. The closest I see in the ReadyNAS os6 is system > settings > services > SMB > Legacy Windows Discovery, but I have that checked. SMB encrypt (auto / mandatory / disabled) in SMB Plus doesn't have an impact.
To the best of my knowledge, SMB 1 does not support encryption at all, so I think that information isn't really correct.
You might be confusing file sharing with log-on authentication. NTLM and NTLMv2 did support DES encryption, back in the days when there were export controls on doing anything stronger. But if your credentials are already accepted, that doesn't appear to be a problem.
Have you considered allowing anonymous access to this particular share? If you try that, also make sure the file permissions are all set to allow "Everyone" access (and use the reset control to apply those permissions to all the existing files).
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
