DSM-G600, DNS-3xx and NSA-220 Hack Forum

Thanks BQ

F/w 1.05 last week (after my reformat and backup change). LLTD enabled last week on DNS, don't know about vista LLTD settings (ie how to disable).
Yes have always used vista to access (probably a few months ago I tried same with XP laptop with no difference but could be imaging that I did it - no longer have XP), problem since day one, and tonight the same problem with LLTD as above enabled.

What do you think now? Cheers for the advice

This is something I've encountered in the past with OS X and samba, but I'm not sure if it's applicable to the samba server on the DNS-323.  Sometimes samba doesn't like certain symbols in passwords and will deny access if they're used.  If you're using symbols, try changing the password to just letters and numbers and see if it helps.

Last edited by raid123 (2008-05-21 23:27:13)

sjmac - You are right, I was confusing 2 terms.  What I meant was NTLMv2.  The DNS does not support it, but it is the default on windows vista.  It needs to be changed to LM security handshake.

hastings - sorry about the confusion.  Anyway, I had hit or miss connections with Vista before seting the securities correctly.  It would always work with no user/password (if the DNS was set that way) but as soon as a password was introduced, then it would not connect.  Vista also remembers if a password is supposed to be used, so even if you have a user without a password, Vista will still want one.  The setting for NTLM is in the local security policy on Vista, but getting there is different depending what version you have.  I'm running Business and Ultimate, so it easy to get there.  I set up one Home edition, but I do not recall how to get there, I'd have to look it up.

See if you can do this on your Vista machines.

Open your start menu and click 'run'.  In there, run secpol.msc  If you have permission, great.  If not, we're done.  If it does load up, open 'local policies' and 'security settings'.  Look for 'Network Security: LAN Manager authentication level'.  If you set it to 'Send LM & NTLM - use NTLMv2 session if negotiated', you should still be able to use your domain at work and I know this setting will talk to the DNS, it is what I use.

One other thing to remember.  Right click on your 'my computer' icon and select 'map network drive' to map the drive on Vista.  Before you hit 'finish', hit the link for logging on as another user and put in your info. 

If you just hit finish and it prompts for a login and password, you get a 1 shot deal, it will not allow a change to the user name and doesn't always work.

Hey and Thanks.

Just tested - WOW the permissions are actually working properly.... I have just gotten past what I have tried for a VERY long time.

I have only really changed the NTLM setting, otherwise all else is the same, different password at logon and reconnect.

Actually the other thing was I ruight clicked computer and added MAP NETWORK DRIVE rather than the icon on the taskbar at the top...?

I AM SO HAPPY, thanks for your advice and help, I think I can put this to bed,

Regards a very happy Hastings69. I am now going nuts adding folder specific permissions, what a novelty.

Whoops,
Sorry everyone, I also changed one other thing....... I did chmod Volume_1 to try and get this problem sorted out..... and the outcome of this is...... my SSH connection won't allow connections as I have allowed everyone in the world to view the key files.

Permissions 0777 for '/ffp/etc/ssh/ssh_host_dsa_key' are too open.
It is recommended that your private key files are NOT accessible by others.
This private key will be ignored.

I can still telnet in (it asks for login, and I login as root and password), my own solution is to delete everything (not data) and re funplug it all. But I would be keen for an alternative.
I know what can be said about a "little amount of information is more dangerous than none....."
I realise now I just should have chmod "media and data" folders within Volume_1 not Volume _1 itself

I am fun plug 0.5, FW 1.05, Trying SSH, sort of trying with chroot debian etch, and backup from A to B each night.  If I don't have to ruin all that hard work for yet another dumb permission problem that would be great (dumb on my part not the system.)

Thanks again
Hastings69

Thanks sjmac, didnt change anything unfotunately, I might just restart, given I want the files to be tight especially for connections. Here goes another Sunday!
Hastings69

Thanks sjmac.
And thanks for those links.
I decided to restart everything, going back to a simpler setup, ffp 0.5, SSH and backup. I was planning on playing around with access over web, but have decided (for today anyway to just leave this box hidden and secure, and continue to fiddle and learn on an ubuntu old box instead, makes mistakes there and then once I know more, come back to the DNS.
Reinstalling FFP and SSH and telnet didn't take very long (30mins). And those links helped as I had trouble removing some of the files that had permission problems when deleting for the reinstall.

I did try a chmod command in the mean time, and it to allow less access, I think  from memory I had it at 600? maybe, but it didnt change anything.

Pity I didn't get it completely sorted but I appreciate your help and replies.
Regards