Access SMB shares from Windows 11 24H2

roxton · December 11, 2024 at 5:14 PM

Hi everyone!

Windows 11 24H2 started rolling out recently, and with it a new policy for accessing SMB shares. Since upgrading to 24H2 I can't access LibreELEC's default network shares which were accessible from 23H2. Here's what the problem looks like (don't mind the user on the screenshot, I also used libreelec user with the password set in LibreELEC settings):

The only thing that helped was executing Set-SmbClientConfiguration -EnableInsecureGuestLogons $true on the Windows machine.

And because that's not something I want to fix by disabling a security feature on the client side, I started experimenting with various properties in /storage/.config/samba.conf and then doing

Code

systemctl stop smbd
/usr/lib/samba/samba-config
systemctl start smbd

Reading through https://www.samba.org/samba/docs/cur…smb.conf.5.html I tried adding guest ok = no and commenting out public = yes, changing map to guest from Bad User to Never, commenting out guest account = root, adding restrict anonymous = 2, etc. Nothing helped though.

My /storage/.config/samba.conf currently looks like this:

Code

# SPDX-License-Identifier: GPL-2.0-or-later
# Copyright (C) 2009-2016 Stephan Raue (stephan@openelec.tv)
# Copyright (C) 2017-present Team LibreELEC (https://libreelec.tv)

# samba.conf v4 (do not remove)

# This configuration file allows you to customize the samba shares
# available from your machine

[global]
  server string = LibreELEC
  browseable = yes
  writeable = yes
  printable = no
  deadtime = 30
  mangled names = no
  name resolve order = host bcast
  printcap name = /dev/null
  load printers = no
  enable core files = no
  passdb backend = smbpasswd
  smb encrypt = disabled
  # server signing = auto
  fruit:model = Xserve

  # samba share options
  restrict anonymous = 2
  # map to guest = Bad User
  map to guest = Never
  # guest account = root
  security = user

  # samba tuning options
  socket options = TCP_NODELAY IPTOS_LOWDELAY
  min receivefile size = 16384
  aio read size = 16384
  aio write size = 16384
  use sendfile = yes

  # The following are default values for the master selection process
  # local master = yes
  # preferred master = auto
  # domain master = auto
  # os level = 20

  # "strict allocate = yes" breaks large network transfers to external hdd
  # Force this to "no" in case "yes" becomes the default in future
  strict allocate = no

# Using the following configurations as a template allows you to add
# writeable shares of disks and paths under /storage

[Update]
  path = /storage/.update
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Videos]
  path = /storage/videos
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Music]
  path = /storage/music
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[TV Shows]
  path = /storage/tvshows
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Recordings]
  path = /storage/recordings
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Downloads]
  path = /storage/downloads
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Pictures]
  path = /storage/pictures
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Emulators]
  path = /storage/emulators
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Configfiles]
  path = /storage/.config
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Userdata]
  path = /storage/.kodi/userdata
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Screenshots]
  path = /storage/screenshots
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Logfiles]
  path = /storage/logfiles
  available = yes
  browseable = yes
  # public = yes
  writeable = yes
  root preexec = createlog

[Backup]
  path = /storage/backup
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

[Picons]
  path = /storage/picons
  available = yes
  browseable = yes
  # public = yes
  writeable = yes

Display More

So here's the question: can we somehow configure SMB on LibreELEC so that SMB shares could be accessed from Windows 11 24H2?

HomerJau · December 11, 2024 at 5:24 PM

You use the SMB credentials entered in your LibreElec Settings on your device (Kodi settings UI) into the Windows dialog.

roxton · December 11, 2024 at 5:26 PM

I do use them. And they work on 23H2.

HomerJau · December 11, 2024 at 5:30 PM

They work for me on 24H2. Check ‘Remember my credentials’. No need to worry about it again.

roxton · December 11, 2024 at 5:33 PM

I made sure to check the same credentials multiple times on two separate PCs, one with 24H2 and one with 23H2. On 23H2 they work from the start. On 24H2 they work only after I execute Set-SmbClientConfiguration -EnableInsecureGuestLogons $true and then the problem returns when I reverse this change.

HomerJau , could you please check if Get-SmbClientConfiguration | FL EnableInsecureGuestLogons returns False for you?

MatteN · December 11, 2024 at 6:50 PM

I cant access any of my Windows pc's that are on my network from my one pc with 24H2, but i can access the 24H2 pc from all my others pc's with win 11 and win 10.

I stopped all my other pc's from getting the 24H2 update.

Edit: This fixed my problem: https://www.wintips.org/fix-windows-11…res-0x80070035/

thereddestdog · December 12, 2024 at 1:22 AM

See here

Post

RE: Can no longer access Libelect from win 11

[…]

I had credentials there (probably because of default setup) but did not have require authentication enabled! Thank you, I was looking in Kodi Services menu, and not the LibreELEC Settings > Services menu..

This is the preferred solution vs. sparkplug's sugestion of Group Policy modifications for Win11 machines.

Perhaps LE should have 'Use Samba Password Authentication' as enabled by default now that Win11 is gaining?

Thank you!

thereddestdog

December 4, 2024 at 2:42 PM

**chewitt** · December 12, 2024 at 5:05 AM

Quote from roxton

Here's what the problem looks like

The image shows you trying to use "root" as the user. That's correct for SSH access, but the default Samba user is "libreelec" with password "libreelec" so that could be the obvious problem?

roxton · December 12, 2024 at 8:28 AM

Apologies, the screenshot was taken when I was making wild attempts to access a share. I know I have to use the username and password that I set in LibreELEC settings.

The above made me try one more thing. I went to the settings and disabled and enabled again the password-protected SMB switch, now I can access all the shares from 24H2.

I then reverted /storage/.config/samba.conf to the state of /storage/.config/samba.conf.sample, ran /usr/lib/samba/samba-config, restarted smbd and rebooted the 24H2 machine and it still lets me in.

So, apologies for making the fuss, I have no idea what was wrong and where. And thanks for your help!

Access SMB shares from Windows 11 24H2

RE: Can no longer access Libelect from win 11

Similar Threads

Troubles accessing samba LAN shares on an ubuntu server