DSM-G600, DNS-3xx and NSA-220 Hack Forum

I've been working on my Debian Laptop & my Ubuntu Desktop.  Never had a problem accessing the shares from the DNS-323, but I've never been able use Nautilus or Dolpin to browse the network - until recently.  The work around I was using until yesterday (as I decided to explore this minor inconvenience deeper) was to either mount the shares at a command prompt or to manually punch in "smb://[ipaddress]/[share]" to access my DNS-323.  This is a quick fix, but please note that it's not the most secure method and I do *NOT* recommend for any system that is actively performing any file/printer sharing of any kind.  I'm hoping to find a better way at another date (higher priority is examining music playback on my xBox 360)

The DNS-323 uses an older Samba service for printer/directory sharing.  This service by default uses lanman based authentication (eww).  Of course, another issue at hand is that the DNS-323 uses the old style Win9X shares for serving up directories (it doesn't care about the user name, as long as you have a working password you have access to the shares of the DNS-323).

Now, I used telnet and redid the smb.conf file to enable security = user so that the DNS-323 would have to authenticate both the user as well as the password, but this didn't do anything to help browse the network, and also really badly messed up with me being able to use the printer from my Linux machines - so at this time, I'm still working on the DNS-323 side to achieve better security - hopefully I'll have a second and better option to post at some point (or if someone beats me to it - LOL).

If your Samba client in Linux is a 3.2.x or later, it will not use lanman for any form of authentication unless told explicitly to do so.  For some strange reason, if lanman authentication is not used, the client machne will not be able to retrieve the list of shares from the DNS-323, nor will is browse into the actual shares with a prompt for password properly.

After playing around, with the following lines added to the client machines [global] section of the smb.conf as well as slight alteration to the resolve order to speed up the client machine grabbing the workgroup, workgroup servers, and workgroup shares lists, the client machine should not have any issues to browse the shares of the DNS-323 and also prompt for passwords when needed from both Dolpin and/or Nautilus (I've tested this on four machine using Debian Etch, Debian Lenny, Ubuntu Intrepid, and Ubuntu Jaunty - I hope this helps other Linux desktop users):

[global]
    security = share
    client lanman auth = yes
    lanman auth = yes
    name resolve order = lmhosts bcast host