On Fri, 2021-07-02 at 10:45 +0200, L.P.H. van Belle via samba wrote:> All what Aur?lien said.. + > > Now which DSM are you running 6.x or 7.0? > Because when its 7.0 > > > NT4 domains are no longer supported. Current NT4 domains will be > > > unavailable after the update. > And > > > DSM 7.0 by default disables NTLMv1 and enables NTMLv2 only, so > > > SMB clients > > > (e.g., Windows XP devices, media players, network printers, smart > > > TVs, and IP cameras) won?t be > > > able to access your Synology NAS. To restore the connection after > > > the update, > > > go to Control Panel > File Services > SMB > Advanced Settings > > > > Others and enable NTLMv1 authentication. > > https://www.synology.com/en-global/dsm/feature/active_directory > Set it up join the domain and and your set. > > Stop fiddeling around and avoid the configs that will break you setup > in near future. >Hi Louis, the problem is that the OP has intimated that he doesn't have an Active Directory domain, if he had said that there was a DC, I would have pointed him in that direction days ago. He even tried to say there were only two machines in use, now he has admitted there will be clients, number unspecified. We know little about his network and this hasn't helped. Rowland
On Fri, 2021-07-02 at 10:09 +0100, Rowland Penny via samba wrote:> On Fri, 2021-07-02 at 10:45 +0200, L.P.H. van Belle via samba wrote: > > All what Aur?lien said.. + > > > > Now which DSM are you running 6.x or 7.0? > > Because when its 7.0 > > > > NT4 domains are no longer supported. Current NT4 domains will > > > > be > > > > unavailable after the update. > > And > > > > DSM 7.0 by default disables NTLMv1 and enables NTMLv2 only, so > > > > SMB clients > > > > (e.g., Windows XP devices, media players, network printers, > > > > smart > > > > TVs, and IP cameras) won?t be > > > > able to access your Synology NAS. To restore the connection > > > > after > > > > the update, > > > > go to Control Panel > File Services > SMB > Advanced Settings > > > > > Others and enable NTLMv1 authentication. > > > > https://www.synology.com/en-global/dsm/feature/active_directory > > Set it up join the domain and and your set. > > > > Stop fiddeling around and avoid the configs that will break you > > setup > > in near future. > > > > Hi Louis, the problem is that the OP has intimated that he doesn't > have > an Active Directory domain, if he had said that there was a DC, I > would > have pointed him in that direction days ago. He even tried to say > there > were only two machines in use, now he has admitted there will be > clients, number unspecified. We know little about his network and > this > hasn't helped. > > RowlandCurrently, there is no domain of any kind. As stated, I am not entirely against using one if it would help, especially if I may do so using the features provided on the Synology device. As stated also, the preference is to keep matters as simple as possible, and having no domain is simpler than having one. Thus, I might prefer a solution not requiring a domain, if available. It seems, though, from comments, that none is available. Regarding clients or other information, please let me know if I can offer you more useful information. It seems you feel that the way this question is resolved ought to be planned for some fixed number and type of clients, but the fact is this information would be quite dynamic. Connections would be made by various laptops and handheld devices that would be connected to the LAN at various times, as well as occasionally by desktops on a WAN. None of these devices would exist exclusively as clients to the file shares, but rather this use is one of many for these devices. There is no fixed use case or demand capacity for these connections. The network is more of a very simple but also slightly unpredictable SOHO configuration, rather than a network used in a business or data center, which is more likely to have a fixed count of nodes. Again, please let me know if you would like me to add any more information.
> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Eric > Levy via samba > Verzonden: vrijdag 2 juli 2021 16:12 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] multiuser with simple user mapping > > On Fri, 2021-07-02 at 10:09 +0100, Rowland Penny via samba wrote: > > On Fri, 2021-07-02 at 10:45 +0200, L.P.H. van Belle via samba wrote: > > > All what Aur?lien said.. + > > > > > > Now which DSM are you running 6.x or 7.0? > > > Because when its 7.0 > > > > > NT4 domains are no longer supported. Current NT4 domains will > > > > > be > > > > > unavailable after the update. > > > And > > > > > DSM 7.0 by default disables NTLMv1 and enables NTMLv2 only, so > > > > > SMB clients > > > > > (e.g., Windows XP devices, media players, network printers, > > > > > smart > > > > > TVs, and IP cameras) won?t be > > > > > able to access your Synology NAS. To restore the connection > > > > > after > > > > > the update, > > > > > go to Control Panel > File Services > SMB > Advanced Settings > > > > > > Others and enable NTLMv1 authentication. > > > > > > https://www.synology.com/en-global/dsm/feature/active_directory > > > Set it up join the domain and and your set. > > > > > > Stop fiddeling around and avoid the configs that will break you > > > setup > > > in near future. > > > > > > > Hi Louis, the problem is that the OP has intimated that he doesn't > > have > > an Active Directory domain, if he had said that there was a DC, I > > would > > have pointed him in that direction days ago. He even tried to say > > there > > were only two machines in use, now he has admitted there will be > > clients, number unspecified. We know little about his network and > > this > > hasn't helped. > > > > Rowland > > > Currently, there is no domain of any kind.Well, basicly thats great, because that does give you options.> As stated, I am not entirely > against using one if it would help, especially if I may do so > using the features provided on the Synology device. As stated also, > the preference is to keep matters as simple as possible, and having no > domain is simpler than having one.Well, yes, thats true, but keep in mind that, almost any OS is increasing security settings, a "easy" setup now, might bit you later on.> Thus, I might prefer a solution not requiring a domain,That one you must deside..> if available. It seems, though, from comments, that none is available. > > Regarding clients or other information, please let me know if I can > offer you more useful information. It seems you feel that the way this > question is resolved ought to be planned for some fixed > number and type of clients, but the fact is this information would > be quite dynamic. > Connections would be made by various laptops and handheld devices that > would be connected to the LAN at various times, as well as > occasionally by desktops on a WAN.> None of these devices would exist exclusively as > clients to the file shares, but rather this use is one of many for > these devices. There is no fixed use case or demand capacity for these > connections. The network is more of a very simple but also slightly > unpredictable SOHO configuration, rather than a network used in a > business or data center, which is more likely to have a fixed count of > nodes. > > Again, please let me know if you would like me to add any more > information.Well, then i suggest, https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Standalone_Server That shows also what you. Its most simple, the "demo" share shows what you want, 1 share, for multiple users. Only, you need to add that through the DSM software from synology Its some time ago i worked with these. :-/ and i see DSM 7 is pretty new. Just give it a go and test it carefully. See how far you come and if its not working, mail the list here. (ps. I might be bit slow in responce, 1 week hard needed vacation in 10 min ) :-)) Greetz, Louis