Page 2 of 5

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Tue Jun 25, 2019 11:11 pm
by hyemar
Any news to this? We are experiencing exactly the same.

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Tue Jun 25, 2019 11:39 pm
by drivie
ButlerSAB49 wrote:
Tue Jun 25, 2019 9:39 pm
QNAP Support responded to me today as per the attached... Unfortunately what they've advised does not seem to work either so I've responded again and awaiting another response!

Worth a try for you guys - let me know if it does happen to work for you... The setting they mentioned on my QNAPs was set to "Disabled" but the wording of the "Disabled" option sounds correct for what I want anyway... Will keep you posted!
Thanks for posting this.

I too have checked that particular setting. I've also tried all three options in the drop-down list but it made no difference.

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 4:43 am
by Don
For security reasons you should not allow guest access. Many a virus has been spread because of guest access. Every user should have a unique ID and password. The ID and password should match their Windows ID and password and then there will be no pop up asking for credentials.

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 5:01 am
by ButlerSAB49
Whilst I appreciate the concerns around security this was still a feature which was available prior to Firmware Update so I'd expect it to still be available etc. We have shares configured in the manner you've suggested but then also have other open Shares setup which now no longer work... At the end of the day you can lock Guest Access down as Deny/Read Only/Full Access so it should be at sysadmins discretion what to set it as! Still no news from QNAP Support but will update as and when!

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 11:07 am
by megaabite
Don wrote:
Wed Jun 26, 2019 4:43 am
For security reasons you should not allow guest access. Many a virus has been spread because of guest access. Every user should have a unique ID and password. The ID and password should match their Windows ID and password and then there will be no pop up asking for credentials.
using nVidia Shield to access NAS. unfortunately it has a bug where I cannot actually enter a username or password - the clickable keypad disappears after selecting the first character... :|

so we use what we have. in my case that is guest access. worked fine before update. does not work now. what changed?

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 12:14 pm
by Moogle Stiltzkin
megaabite wrote:
Wed Jun 26, 2019 11:07 am
Don wrote:
Wed Jun 26, 2019 4:43 am
For security reasons you should not allow guest access. Many a virus has been spread because of guest access. Every user should have a unique ID and password. The ID and password should match their Windows ID and password and then there will be no pop up asking for credentials.
using nVidia Shield to access NAS. unfortunately it has a bug where I cannot actually enter a username or password - the clickable keypad disappears after selecting the first character... :|

so we use what we have. in my case that is guest access. worked fine before update. does not work now. what changed?
you mean the nvidia has a bug?

did you try reflashing the firmware for it? :'

Also did you read this
https://wccftech.com/nvidia-shield-tv-u ... the-works/

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 2:55 pm
by Sandom
I was blaming QNAP, but seems MSFT did something and didn't inform partners
https://support.microsoft.com/en-us/hel ... indows-ser

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 3:34 pm
by ButlerSAB49
Interesting - we are running Windows Server 2012R2 with W10/W7 and I can't find that option with Local Group Policy on 2012R2, looks like they've changed something in W10 and Server 2019 for sure but not convinced the issue we are having is related to this find... Thanks for advising though, may be useful for any W10/Server 2019 users and also very useful for anyone planning to upgrade at some point (which we will be). More fun! :)...

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 4:08 pm
by drivie
Sandom wrote:
Wed Jun 26, 2019 2:55 pm
I was blaming QNAP, but seems MSFT did something and didn't inform partners
https://support.microsoft.com/en-us/hel ... indows-ser
Thank you for posting the link but I don't believe the article you linked to is the issue we're facing here. The article states:

- Windows 10 Enterprise and Windows 10 Education no longer allow a user to connect to a remote share by using guest credentials by default, even if the remote server requests guest credentials.
- Windows Server 2016 Datacenter and Standard edition no longer allow a user to connect to a remote share by using guest credentials by default, even if the remote server requests guest credentials.
- Windows 10 Home and Professional editions are unchanged from their previous default behavior.

The way I interpret the above is that these changes apply to Windows 10 Enterprise or Windows 10 Education and not to Windows 10 Home and Windows 10 Professional (both of which I've tried). Guest access to shares on my TVS-871 was not a problem under Windows 10 Pro 1903, 1803 or 1709 prior the QNAP firmware update to 4.3.6.0979. Since the firmware upgrade I've also tried accessing my NAS as a guest from my Pixel 2 Android phone (via Solid Explorer), MacBook Pro (running Mac OS High Sierra) and Windows 7 PC and all fail with variations of authentication issues. I'm confident there's an issue in the QNAP firmware that's causing this.

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 5:08 pm
by P3R
The security landscape changes and so must the procedures of organizations do as well if they want to survive. Guest access was simple and easy for all the lazy administrator in the 1990s but for the last 15-20 years it's been a terrible idea.

Look at all those US cities being plaugued by ransomware now. The staff didn't update their software but preferred to keep on using things that are now considered insecure and deprecated. That should serve as a warning but I guess there are much more incomptent administrators out there so the cybercriminals won't run out of victims anytime soon... :roll:

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 9:00 pm
by ButlerSAB49
QNAP Support have responded to me as per the attached... I advised them of this forum thread in my response yesterday and the issue is now being escalated through to their 2nd Line Support Team, they have asked me to provide Log Files which I have also sent on etc. I will continue to update with progress - hopefully they discover something in the logs as a red flag and will be able to fix with a patch!

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Wed Jun 26, 2019 9:58 pm
by megaabite
Moogle Stiltzkin wrote:
Wed Jun 26, 2019 12:14 pm
you mean the nvidia has a bug?
yes, nVidia has a bug...just like QNAP...:shock: I have written to them as well.

I am stuck in the middle here...Plex can only talk to SMB shares, QNAP has broken SMB guest access, nVidia will not let me enter a username/password when mounting SMB share...feel like I am running in circles :roll:
Moogle Stiltzkin wrote:
Wed Jun 26, 2019 12:14 pm
did you try reflashing the firmware for it? :'
https://wccftech.com/nvidia-shield-tv-u ... the-works/
pretty sure that will result in the same behavior. would love to reflash QNAP firmware that allows SMB guest access
Moogle Stiltzkin wrote:
Wed Jun 26, 2019 12:14 pm
Also did you read this
https://wccftech.com/nvidia-shield-tv-u ... the-works/
performance of existing Shield is fine for what I do. what I -really- need is a few less bugs

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Thu Jun 27, 2019 5:04 pm
by BrutisNZ
Currently have the exact same problem as OP.

Online soon with the helpdesk, trying to resolve the problem remotely.

If they succeed will post here.

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Thu Jun 27, 2019 5:15 pm
by Rastan
Same problem as OP. Have also tried a rollback to last known good firmware, but still no anonymous access. Noticed that there's a 4.4 firmware beta available (I'm using a TS-253 Pro), but unsure as to whether it'll do any good. Looking forward to reading how this is going to be fixed.

Just to clarify, like some of the other posters here, I also use a media device to access content stored on the NAS, so am unable to enter a username/password combo and are reliant on the guest/anonymous account.

Good luck all!

Rastan

Re: Unable to access NAS as guest following firmware update to v4.3.6.0979

Posted: Thu Jun 27, 2019 5:39 pm
by BrutisNZ
Update: See my better solution at viewtopic.php?f=185&t=149124&p=719369#p719369

Oh btw I'm still waiting for the QNAP tech to access remotely.
This fix below has been working for the last few days, it is NOT QNAP APPROVED
If you know what you are doing here is a temporary solution. It is working for me. Do this at your own risk! blah blah blah

Search for and change the following line in smb.sh located in /etc/init.d

/sbin/setcfg global "invalid users" "guest" -f ${CONFIG}
change to (note the # at the beginning)
# /sbin/setcfg global "invalid users" "guest" -f ${CONFIG}
add the following line below it
/sbin/setcfg global "invalid users" "" -f ${CONFIG}

Save the file and restart SMB with /etc/init.d/smb.sh restart

You should now be able to login without guest credentials.

The above changes the smb.conf file located in /etc/config
from
invalid users = guest
to
invalid users =

If QNAP provide a solution then just reverse the above and restart smb

Cheers,