Hi everyone!
Windows 11 24H2 started rolling out recently, and with it a new policy for accessing SMB shares. Since upgrading to 24H2 I can't access LibreELEC's default network shares which were accessible from 23H2. Here's what the problem looks like (don't mind the user on the screenshot, I also used libreelec user with the password set in LibreELEC settings):
The only thing that helped was executing Set-SmbClientConfiguration -EnableInsecureGuestLogons $true on the Windows machine.
And because that's not something I want to fix by disabling a security feature on the client side, I started experimenting with various properties in /storage/.config/samba.conf and then doing
systemctl stop smbd
/usr/lib/samba/samba-config
systemctl start smbd
Reading through https://www.samba.org/samba/docs/cur…smb.conf.5.html I tried adding guest ok = no and commenting out public = yes, changing map to guest from Bad User to Never, commenting out guest account = root, adding restrict anonymous = 2, etc. Nothing helped though.
My /storage/.config/samba.conf currently looks like this:
# SPDX-License-Identifier: GPL-2.0-or-later
# Copyright (C) 2009-2016 Stephan Raue ([email protected])
# Copyright (C) 2017-present Team LibreELEC (https://libreelec.tv)
# samba.conf v4 (do not remove)
# This configuration file allows you to customize the samba shares
# available from your machine
[global]
server string = LibreELEC
browseable = yes
writeable = yes
printable = no
deadtime = 30
mangled names = no
name resolve order = host bcast
printcap name = /dev/null
load printers = no
enable core files = no
passdb backend = smbpasswd
smb encrypt = disabled
# server signing = auto
fruit:model = Xserve
# samba share options
restrict anonymous = 2
# map to guest = Bad User
map to guest = Never
# guest account = root
security = user
# samba tuning options
socket options = TCP_NODELAY IPTOS_LOWDELAY
min receivefile size = 16384
aio read size = 16384
aio write size = 16384
use sendfile = yes
# The following are default values for the master selection process
# local master = yes
# preferred master = auto
# domain master = auto
# os level = 20
# "strict allocate = yes" breaks large network transfers to external hdd
# Force this to "no" in case "yes" becomes the default in future
strict allocate = no
# Using the following configurations as a template allows you to add
# writeable shares of disks and paths under /storage
[Update]
path = /storage/.update
available = yes
browseable = yes
# public = yes
writeable = yes
[Videos]
path = /storage/videos
available = yes
browseable = yes
# public = yes
writeable = yes
[Music]
path = /storage/music
available = yes
browseable = yes
# public = yes
writeable = yes
[TV Shows]
path = /storage/tvshows
available = yes
browseable = yes
# public = yes
writeable = yes
[Recordings]
path = /storage/recordings
available = yes
browseable = yes
# public = yes
writeable = yes
[Downloads]
path = /storage/downloads
available = yes
browseable = yes
# public = yes
writeable = yes
[Pictures]
path = /storage/pictures
available = yes
browseable = yes
# public = yes
writeable = yes
[Emulators]
path = /storage/emulators
available = yes
browseable = yes
# public = yes
writeable = yes
[Configfiles]
path = /storage/.config
available = yes
browseable = yes
# public = yes
writeable = yes
[Userdata]
path = /storage/.kodi/userdata
available = yes
browseable = yes
# public = yes
writeable = yes
[Screenshots]
path = /storage/screenshots
available = yes
browseable = yes
# public = yes
writeable = yes
[Logfiles]
path = /storage/logfiles
available = yes
browseable = yes
# public = yes
writeable = yes
root preexec = createlog
[Backup]
path = /storage/backup
available = yes
browseable = yes
# public = yes
writeable = yes
[Picons]
path = /storage/picons
available = yes
browseable = yes
# public = yes
writeable = yes
Display More
So here's the question: can we somehow configure SMB on LibreELEC so that SMB shares could be accessed from Windows 11 24H2?