Project Home
Project Home
Wiki
Wiki
Discussion Forums
Discussions
Project Information
Project Info
Forum Topic - SMBfsys for Windows 7: (15 Items)
   
SMBfsys for Windows 7  
Hi: 
On a QNX Product Suite 2011 ( with TCPIP 5.10) node I'm trying to use mount_smb to mount a directory on
a PC running Windows 7. SMBfsys is running. User mapping is OK.  Pinging the
Windows 7 PC works OK.  When the mount is attempted I get a "Permission denied" error 
Has anyone tried this or have experience with this ?
NOTE: Back in 2008 we tried mounting a directory on a Vista machine and got the same issue. This was with QNX4.25G.
I assumed that by now some fixes would have been made but it looks like it is still an issue or I'm doing something 
wrong re permissions on Windows 7.
I can successfully do the mount on an XP or 2003 Server .
Some of our customers are migrated their Windows computers to Windows 7 and this will become an issue going forward as 
they use mounted directories for archival storage of data and priniting as well.
- Regards,

Kevin
Re: SMBfsys for Windows 7  
Hi,
my colleagues also faced problems when trying to mount shared folder on Windows 7.
They found following solution:
When trying to mount to WIN7 or WIN vista it is needed to disable 128 bit encryption.
*  Control Panel 
*  Admin Tools 
*  Local Security Policy 
*  Local Policies 
*  Security Options 
*  Network Security : Minimum Security settings for NTLM SSP based 

I am working now on Windows XP and I am not able to check it, so I just copied text from our wiki.
If I remember it correctly, there should be also option for enable/disable 128bit encryption in "Advanced sharing 
options" available somewhere from Network center.

Hope it helps.

Regards,
Jiri
Re: SMBfsys for Windows 7  
Hi Jiri:

  Thanks so much. I'll give this a try.

 - Kevin



Jiri Basek <community-noreply@qnx.com> 
08/11/2011 02:59 AM
Please respond to
post88000@community.qnx.com


To
general-qnx4 <post88000@community.qnx.com>
cc

Subject
Re: SMBfsys for Windows 7






Hi,
my colleagues also faced problems when trying to mount shared folder on 
Windows 7.
They found following solution:
When trying to mount to WIN7 or WIN vista it is needed to disable 128 bit 
encryption.
*  Control Panel 
*  Admin Tools 
*  Local Security Policy 
*  Local Policies 
*  Security Options 
*  Network Security : Minimum Security settings for NTLM SSP based 

I am working now on Windows XP and I am not able to check it, so I just 
copied text from our wiki.
If I remember it correctly, there should be also option for enable/disable 
128bit encryption in "Advanced sharing options" available somewhere from 
Network center.

Hope it helps.

Regards,
Jiri



_______________________________________________

General
http://community.qnx.com/sf/go/post88000


Re: SMBfsys for Windows 7  
Hi Jiri:

I tried disabling the 128 bit encryption thru the Control Panel and thru Advanced Sharing options from Network Center 
and I still get the same error from the command:

/bin/mount_smb -s //Shadow1:138.226.119.166/Mpoint  /tmp

Any other suggestions ???

Thanks,
Kevin
Re: SMBfsys for Windows 7  
Hi, Kevin
Try to remove username Guest in local policy «Deny Access to This Computer from the Network»:
*  Control Panel 
*  Admin Tools 
*  Local Security Policy 
*  Local Policies 
*  User Rights Assignments
Re: SMBfsys for Windows 7  
Hi Alexey:

 I tried your suggestion and I still get the same pemission error.

 Any other ideas ?

- Thanks,
   Kevin
Re: SMBfsys for Windows 7  
Windows 7 too secure for old Samba software
These are the steps I had to make to get it to work:
Change the registry settings:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
"LmCompatibilityLevel"=dword:1	-allow older Lan manager style messages
"NoLmHash"=dword:0	-store the older, less secure Lan Manager encrypted password

Run "gpupdate /force" so these settings take effect.

Change the password (to the same password) for the user(s) that need to connect.

Re: SMBfsys for Windows 7  
Hi Rudi:

I tried your suggestion however I could only find  the 'NoLmHash" registry setting on my Windows 7 Enterprise  N Service
 Pack 1 computer. I could not find 'LmCompatibiltyLevel". So I made the "NoLmHash" change and ran gpupdate /force.

On the QNX side I ran:

/usr/bin/user_smb -u (qnx user id) pcv root
followed by :
/bin/mount_smb  //Shadow1:138.226.119.166/try /tmp1
where Shadow1:138.226.119.166 is my Windows Computer name and IP address
try is the shared folder which the windows user "pcv" has read/write access to
pcv is the Windows user id with root being the password
pcv has Administrator rights.

I still get the permission error.
Re: SMBfsys for Windows 7  
Created key LmCompatibilityLevel  (including rebooting)

Change the password (to the same password) for the user(s) that need to connect.
Re: SMBfsys for Windows 7  
Is the Guest account enabled?
I did only three things to get access (for Windows 7):
1. Enabled the Guest account
2. Removed Guest in policy «Deny Access to This Computer from the Network».
3. Allowed access to shared folder for Guest user.
And it works!
Re: SMBfsys for Windows 7  
Hi Alexey:

Woops I did not have Guest enabled.
I enabled Guest and removed it in Policy <<Deny Access to This Computer
Then I allowd access to the shared folder try  for the Guest user.

On the QNX side I ran:

usr/bin/user_smb -u (qnx user id) Guest
followed by :
/bin/mount_smb  //Shadow1:138.226.119.166/try /tmp1
where Shadow1:138.226.119.166 is my Windows Computer name and IP address
try is the shared folder which the windows user "Guest" has read/write access to
/tmp1 is the qnx local path

I still get the permission error.
Re: SMBfsys for Windows 7  
Created key LmCompatibilityLevel (including rebooting)

Change the password (to the same password) for the user(s) that need to connect
Re: SMBfsys for Windows 7  
Hi Rudi:

  I created the LmCompatibility key and tried it again but still no luck.
  The qnx user I was logged in as on the QNX node had the same password as the
  user I logged in as on the Windows computer.  
Re: SMBfsys for Windows 7  
Hi, Kevin
That’s what I’m doing on QNX side:
  SMBfsys &
  mount_smb //Win7:192.168.5.99/Temp /mnt
I do not run user_smb and successfully get access to shared folder C:\Temp on Win7 computer (as /mnt on QNX side). 
And try to turn off Windows Firewall.
Re: SMBfsys for Windows 7  
Hi Alexey:

  Sorry I forgot to thank you for your assistance. It works beautifully!

 - Kevin