NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Samba share access permissions not making sense
I just noticed that access permissions for SMB shares on my ReadyNAS102 don't seem to be working. When I set up my RN102 sereval years ago I was a bit lazy and just set up all my shares as read/w...
Digsy wrote:
The CCTV share is the only share that I want to require a username and password for, but when specify this username in Network Access and I supply credentials for it when I try to connect, it doesn't work unless I use the command line.Windows won't accept my username and password as valid, but the command line will.
Obviously this is a Windows issue.
If you entered the credential in the Windows Credential Manager, then you shouldn't be needing to enter the username at all. If you also entered the password there, you shouldn't be needing to enter that either.
Are you entering \\nas-ip-address\sharename in the file explorer address bar to access the share?
One thing to keep in mind - Windows only allows one set of credentials per machine at a time. And if you first access the NAS w/o a credential, Windows will still use one - it defaults to using the Windows Login. You can clear that using the net use * /delete /y command. So perhaps just try that command, and then see if the file explorer will take your credential.
Thanks for the detailled reply. I sem to have fixed this now but I still don't understand how / why.
When gong into the File Access section for the share, I noticed that although the folder owner name was set to my master CCTV account, there was no tick against "Folder Owner" for either Read nor Read/Write access, although Rear/Write was ticked for "Folder Group". Bear in mind that this was working fine for HTTP (reading via the web viewer) and write (via FTP) but not for SMB.
I guess I had accidentally locked my master CCTV account out by granting neither read nor read/write access, but I don't understand why SMB should behave differently to FTP or HTTP where this setting is concerned.
Also, it seems (as you suggest) that I can only map this particular share from the command line and not from inside Explorer - again, no idea why.
As I have a solution I haven't done all your troubleshooting steps, but here are my settings for this share:
Network access:
For SMB:
Admin (group): Read / Write
Admin (user): Read / Write
CCTV master (user): Rear / Write
No others ticked
For FTP:
Admin (group): Read / Write
Cameras (group): Read / Write
Admin (user): Read / Write
CCTV master (user): Rear / Write
No others ticked
For HTTP:
Admin (group): Read / Write
Cameras (group): Read / Write
Admin (user): Read / Write
CCTV master (user): Rear / Write
No others ticked
File access:
Folder Owner: CCTV master
Folder Group: Cameras
"Grant rename and delete...": ticked
Everyone (group): Read/Write
Folder Owner (user): Read/Write
Folder Group (group): Read/Write
Admin (group): Read/Write
Admin (user): Read/Write
No others ticked
Digsy wrote:
Also, it seems (as you suggest) that I can only map this particular share from the command line and not from inside Explorer - again, no idea why.
Likely the PC isn't using the correct credentials. Try running the windows credential manager, and delete any existing credentials for the NAS. Then add a credential, using the NAS account you wish to use.
Note if you use both NAS hostname and the NAS IP, you will need two credentials - one for each.
Yes, there was an entry in credental manager, but it looked correct. I deleted it and created a new one but it still won't allow e to map the drive from Explorer.
So how should (in your opinion) my access permissions for SMB be set up for this to work?
All I want is for one user to be able to connect to this particular share with username and password protection using Explorer, ideally without having to permanently map it to a drive letter, or having to use the command line. I cannot see what I am doing wrong here. It feels like something isn't working the way it should.
Digsy wrote:
All I want is for one user to be able to connect to this particular share with username and password protection using Explorer, ideally without having to permanently map it to a drive letter, or having to use the command line. I cannot see what I am doing wrong here. It feels like something isn't working the way it should.
And that user account is the only one you want to use for NAS access from that PC?
Are you able to access other shares from file explorer with the new credential?
All my other shares are set to allow anonymous access, so I do not need to provide credentials to access them. I can map these shares or connect directly by typing the pathname into Explorer just fine.
The CCTV share is the only share that I want to require a username and password for, but when specify this username in Network Access and I supply credentials for it when I try to connect, it doesn't work unless I use the command line.Windows won't accept my username and password as valid, but the command line will.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
