Netzlaufwerk verbinden: "Ein erweiterter Fehler ist aufgetreten"

[Fischreiher]

Ja, der PC wurde vor vielen Jahren von Windows 7 auf Windows 10 angehoben. Der Laptop wurde 2021 frisch mit Windows 10 Pro installiert.

Samba Config:

gbquad:~# cat /etc/samba/smb.conf                                                                                                                         
# Do not edit this file!                                                                                                                                   
# Only edit smb-user.conf                                                                                                                                 
include = /etc/samba/distro/smb-global.conf                                                                                                               
gbquad:~# cat /etc/samba/distro/smb-global.conf                                                                                                           
[global]                                                                                                                                                   
        security = USER                                                                                                                                   
        map to guest = Bad User                                                                                                                           
        min receivefile size = 16384                                                                                                                       
        use sendfile = Yes                                                                                                                                 
        aio read size = 16384                                                                                                                             
        aio write behind = true                                                                                                                           
        aio write size = 16384                                                                                                                             
        username map = /etc/samba/private/users.map                                                                                                       
        smb passwd file = /etc/samba/private/smbpasswd                                                                                                     
        passdb backend = smbpasswd                                                                                                                         
        idmap config * : backend = tdb                                                                                                                     
        obey pam restrictions = Yes                                                                                                                       
        max stat cache size = 64                                                                                                                           
        unix password sync = Yes                                                                                                                           
        pam password change = Yes                                                                                                                         
        server multi channel support = Yes                                                                                                                 
        passwd program = /usr/bin/passwd %u                                                                                                               
        passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .                                 
                                                                                                                                                          
        # Disable printer support for now                                                                                                                 
        disable spoolss = Yes                                                                                                                             
        load printers = No                                                                                                                                 
        printcap name = /dev/null                                                                                                                         
                                                                                                                                                          
        enable privileges = Yes                                                                                                                           
        unix extensions = No                                                                                                                               
        allow insecure wide links = Yes                                                                                                                   
                                                                                                                                                          
        include = /etc/samba/distro/smb-branding.conf                                                                                                     
        include = /etc/samba/distro/smb-shares.conf                                                                                                       
        include = /etc/samba/distro/smb-vmc.conf                                                                                                           
                                                                                                                                                          
        include = /etc/samba/smb-user.conf                                                                                                                 
gbquad:~# cat /etc/samba/smb-user.conf                                                                                                                     
## User changes to Samba config go here                                                                                                                   
                                                                                                                                                          
## You can overrule the insecure defaults and enforce password                                                                                             
## protected access to shares by uncommenting the following                                                                                               
## line, including the secure settings:                                                                                                                   
                                                                                                                                                          
[global]                                                                                                                                                   
#       include = /etc/samba/distro/smb-secure.conf                                                                                                       
                                                                                                                                                          
                                                                                                                                                          
## You can hide and veto access to certain directories, e.g. mount points of                                                                               
## other boxes in order to prevent round trips through your LAN                                                                                           
## In Samba 4.x this needs to be configured per share:                                                                                                     
                                                                                                                                                          
[Root]                                                                                                                                                     
        comment = Everything - take care!                                                                                                                 
        path = /                                                                                                                                           
        guest ok = yes                                                                                                                                     
        read only = no                                                                                                                                     
        valid users = root                                                                                                                                 
        admin users = root                                                                                                                                 
        force create mode = 600                                                                                                                           
        force directory mode = 700                                                                                                                         
        wide links = yes                                                                                                                                   
        follow symlinks = yes                                                                                                                             
                                                                                                                                                          
[Harddisk]                                                                                                                                                 
        comment = The harddisk                                                                                                                             
        path = /media/hdd                                                                                                                                 
        guest ok = Yes                                                                                                                                     
        read only = No                                                                                                                                     
        valid users = root kids                                                                                                                           
        admin users = root                                                                                                                                 
        force create mode = 0600                                                                                                                           
        force directory mode = 0700                                                                                                                       
        wide links = yes                                                                                                                                   
        follow symlinks = yes                                                                                                                             
                                                                                                                                                          
[Movie]                                                                                                                                                   
        comment = The harddisk                                                                                                                             
        path = /media/hdd/movie                                                                                                                           
        guest ok = Yes                                                                                                                                     
        read only = No                                                                                                                                     
        valid users = root kids                                                                                                                           
        admin users = root                                                                                                                                 
        force create mode = 0600                                                                                                                           
        force directory mode = 0700                                                                                                                       
        wide links = yes                                                                                                                                   
        follow symlinks = yes

Ergänzung (18. Januar 2023)

Nein, mit "kids" hat das nie funktioniert. Wie gesagt, immer nur ohne Anmeldeinformationen - was mir das Notebook aber nicht mehr anbietet.

 

[redjack1000]

Ja, der PC wurde vor vielen Jahren von Windows 7 auf Windows 10 angehoben. Der Laptop wurde 2021 frisch mit Windows 10 Pro installiert.

Ahh, beim Update von Win7 auf 10 wird die Netzwerksicherheit nicht angefasst. Ich vermute das da eher das Problem liegt

Versuche es mal damit, eins gleich vorweg, damit schraubst Du die Sicherheit vom Windows 10 herunter

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation\ /v AllowInsecureGuestAuth /d 1 /f

Cu
redjack

 

[Fischreiher]

AllowInsecureGuestAuth hatte ich schon gesetzt, ohne Erfolg, aber ...

Ich habe es geschafft!
Danke für die Bitte, die config zu posten. Ich habe da gerade gesehen

gbquad:~# cat /etc/samba/distro/smb-secure.conf                                                                                                           
[global]                                                                                                                                                   
        # True user level security:                                                                                                                       
        # - Degrade guests to "nobody" rather than escalating them to "root"                                                                               
        # - Stop accepting empty (null) passwords                                                                                                         
        #                                                                                                                                                 
        # Note: This will require you to set passwords using smbpasswd -a                                                                                 
        guest account = nobody                                                                                                                             
        null passwords = No                                                                                                                               
                                                                                                                                                          
        # For more security, disable NetBIOS and enforce min protocol = SMB2_02                                                                           
        # Note: min protocol = SMB2_02 will lock out ancient clients, like DOS, OS/2, Windows 9x as well as OpenPLi up to 4.0 and VTi                     
        disable netbios = Yes                                                                                                                             
        min protocol = SMB2_02                                                                                                                             
        smb ports = 445

.. also schnell

gbquad:~# smbpasswd -a                                                                                                                                     
New SMB password:                                                                                                                                         
Retype new SMB password:

und am Laptop beim Verbinden "nobody" und passwort einegegeben!

Danke für alle Denkanstöße!