Samba and Win10 access :-)

jairbubbles · December 7, 2017 at 8:50 PM

Hello,

My LibreElec on a PI3 was accessing my media directly on my Windows 10 (Creator Update). I've struggled a bit to make it work as SMB1 was disabled:

- On Kodi I added the share manually (smb://192.168.0.18:445 with a user / password)

- On Windows 10 I created a local account and shared my folders for this account

It was quite painful but it finally worked.

It's been working for weeks now but since yesterday it doesn't work anymore. I don't remember changing something at all. I've tried a lot of different things but it just doesn't work anymore . Even reenabling Samba1 in Windows 10 (yes you can) had no effect at all.

Any help on the subject would be greatly appreciated!

jairbubbles · December 7, 2017 at 9:00 PM

I guess explaining my problem was the key to finding the solution.

I logged on Windows 10 with the local account and it tells me my password needed to be changed. I replaced it with the same one and now it's working again

NB: For the share to be accessible you need to "Turn off Password Protected Sharing" in "Advanced sharing settings".

**Klojum** · December 9, 2017 at 12:52 PM Official Post

Quote from jairbubbles

NB: For the share to be accessible you need to "Turn off Password Protected Sharing" in "Advanced sharing settings".

Yes, unprotected networks... That's the spirit. Why don't you guess why the WannaCry virus was such a big success worldwide.

**escalade** · December 10, 2017 at 10:44 AM

Klojum

Snide remarks regarding security is really unfitting when you are representing a distro which runs everything as root, has a default password that can't be changed and also have no password by default for SMB services. Educating users is well and all but security was never a priority for OE/LE so don't act like it is now.

**Klojum** · December 10, 2017 at 11:12 AM Official Post

Those flaws have been there from the beginning of OpenELEC, and yes after so many years they are still there in LibreELEC. Also in your builds. If I had the programming skills I would try and change (some of) that. Changing the root password is supposed to be in the LE 9 builds IIRC. Representing yes, but it doesn't mean I agree with every thing in LibreELEC.

Does that mean it's okay for users to create wide open up networks by turning off password protection? What is likely to follow is questions appearing on our forum why users cannot reach/find/play their media collection anymore. Have fun answering those topics.

**escalade** · December 10, 2017 at 11:48 AM

No, it doesn't mean you have to agree with everything but it does mean you can't scold users for using the same security principles in their home network. Get it? Probably not.

d'Wooluf · December 10, 2017 at 12:11 PM

A few things. I've got Password-protected sharing turned *on* in Windows 10 and LibreElec (Kazaq's latest s905x build) accesses it without any problems. You can tell Windows not to require regular password changes. I can't remember where you do this, but Google will. What I did was to create an account specifically for Samba access and then hide that account without ever signing into it. How to hide accounts? There's one registry key to change. Again, Google will come to your rescue. If you do it that way, there will be minimal impact on your system. No superfluous folder structure under 'Users', No superfluous user name on your sign-in screen. Hth.

Scottford · December 11, 2017 at 1:55 PM

Quote from d'Wooluf

A few things. I've got Password-protected sharing turned *on* in Windows 10 and LibreElec (Kazaq's latest s905x build) accesses it without any problems. You can tell Windows not to require regular password changes. I can't remember where you do this, but Google will. What I did was to create an account specifically for Samba access and then hide that account without ever signing into it. How to hide accounts? There's one registry key to change. Again, Google will come to your rescue. If you do it that way, there will be minimal impact on your system. No superfluous folder structure under 'Users', No superfluous user name on your sign-in screen. Hth.

Your solution sounds interesting. I may have to look into it. Sounds like the solution I'm looking for.