Cannot connect to SMB share on newly configured server via Windows 11

Dodd

Cadet
Joined
Jan 10, 2019
Messages
7
So, after 30 years, I've finally built myself a file server. I've followed the documentation, and spent 5 hours yesterday troubleshooting before posting here.
I've created a User, Group, Dataset, SMB share, and gone over the permissions over and over. SMB is turned on.

I can see the TrueNAS server from my windows 11 PC in the left pane of the file explorer. I can connect to the web GUI.

When I try to connect to \\192.168.0.134 from the file explorer, I get the login dialog. (this is the URL listed on the TrueNAS box console)
I try to log in with the user I created. It tells me the username or password is incorrect. I've recreated the password for the user many times, restarted the server.
Still nothing.

Is there something basic i'm simply missing here, or is this an issue far outside my wheelhouse?
Any ideas out here?
 

Samuel Tai

Never underestimate your own stupidity
Moderator
Joined
Apr 24, 2020
Messages
5,399
Try the full share path \\192.168.0.134\<name of your share>\. Using just \\192.168.0.134 expands to \\192.168.0.134\IPC$, but Samba doesn't implement the IPC$ share.
 

Dodd

Cadet
Joined
Jan 10, 2019
Messages
7
Tried that. it just brings me back to the login.
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Try the full share path \\192.168.0.134\<name of your share>\. Using just \\192.168.0.134 expands to \\192.168.0.134\IPC$, but Samba doesn't implement the IPC$ share.
Samba does implement an IPC$ share.
Code:
root@homenas[/]# smbclient -L //127.0.0.1 -U isouser
Enter WORKGROUP\isouser's password:

    Sharename       Type      Comment
    ---------       ----      -------
    IPC$            IPC       IPC Service (FreeNAS Server)


We do not allow anonymous access to it. midclt call smb.status AUTH_LOG |jq should give some indication of where things are failing. If guest access is enabled on any shares, disable that. Guest access is not reliable in Windows 10+ due to improvements in Windows security defaults.

Maybe also enable the netbios name server. I have seen some cases where Windows clients get unhappy if there is a wsdd advertisement, but no netbios name advertisement.
 

Dodd

Cadet
Joined
Jan 10, 2019
Messages
7
also, wouldn't that not matter? I mean, I'm using a username and password, both of which I created, to log into an account with a share associated to it. Wouldn't i still be able to log in, even if there was no share? So long as SMB is running, and there is a username and password?
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
also, wouldn't that not matter? I mean, I'm using a username and password, both of which I created, to log into an account with a share associated to it. Wouldn't i still be able to log in, even if there was no share? So long as SMB is running, and there is a username and password?
Depends on what Windows is doing behind the scenes :)
When you connect to \\server in windows it's doing a variety of things while actually connecting to \\server\ipc$.
 

Dodd

Cadet
Joined
Jan 10, 2019
Messages
7
Samba does implement an IPC$ share.
Code:
root@homenas[/]# smbclient -L //127.0.0.1 -U isouser
Enter WORKGROUP\isouser's password:

    Sharename       Type      Comment
    ---------       ----      -------
    IPC$            IPC       IPC Service (FreeNAS Server)


We do not allow anonymous access to it. midclt call smb.status AUTH_LOG |jq should give some indication of where things are failing. If guest access is enabled on any shares, disable that. Guest access is not reliable in Windows 10+ due to improvements in Windows security defaults.

Maybe also enable the netbios name server. I have seen some cases where Windows clients get unhappy if there is a wsdd advertisement, but no netbios name advertisement.
OK. i've turned on NetBIOS in Network > Global something-something. Same thing happens.
When i go into the user, there is no password visible, so I enter it and hit save. Still nothing.

Sounds like this is an unusual problem.
 

Dodd

Cadet
Joined
Jan 10, 2019
Messages
7
Exce
Depends on what Windows is doing behind the scenes :)
When you connect to \\server in windows it's doing a variety of things while actually connecting to \\server\ipc$.
Excellent point. I've tried midclt call smb.status AUTH_LOG |jq


and it returns....this:

"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 3666
}
},
{
"timestamp": "2021-11-23T13:26:44.900492-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:52325",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 2492
}
},
{
"timestamp": "2021-11-23T13:27:58.051421-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:52444",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1590
}
},
{
"timestamp": "2021-11-23T13:28:20.512268-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:52487",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1177
}
},
{
"timestamp": "2021-11-23T13:28:42.337757-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:52530",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1097
}
},
{
"timestamp": "2021-11-23T13:29:59.484456-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:52661",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 2223
}
},
{
"timestamp": "2021-11-23T13:30:50.213841-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:52748",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1164
}
},
{
"timestamp": "2021-11-23T13:30:54.031566-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:52760",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1210
}
},
{
"timestamp": "2021-11-23T13:31:26.205781-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:52808",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1297
}
},
{
"timestamp": "2021-11-23T13:34:52.722622-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:53159",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 2085
}
},
{
"timestamp": "2021-11-23T13:35:30.297020-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.183:445",
"remoteAddress": "ipv4:192.168.0.104:49802",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "Andrew",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "Andrew",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1064
}
},
{
"timestamp": "2021-11-23T13:35:30.324326-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.183:445",
"remoteAddress": "ipv4:192.168.0.104:49803",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "Andrew",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "Andrew",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1112
}
},
{
"timestamp": "2021-11-23T13:35:30.336443-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.183:445",
"remoteAddress": "ipv4:192.168.0.104:49804",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "Andrew",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "Andrew",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1136
}
},
{
"timestamp": "2021-11-23T13:35:30.349431-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.0.183:445",
"remoteAddress": "ipv4:192.168.0.104:49805",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "Andrew",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "Andrew",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1090
}
},
{
"timestamp": "2021-11-23T13:36:00.438310-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.183:445",
"remoteAddress": "ipv4:192.168.0.104:49862",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1518
}
},
{
"timestamp": "2021-11-23T13:36:42.638060-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.183:445",
"remoteAddress": "ipv4:192.168.0.104:49954",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1496
}
},
{
"timestamp": "2021-11-23T14:15:18.597867-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55880",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 3547
}
},
{
"timestamp": "2021-11-23T14:15:18.610536-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55881",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1721
}
},
{
"timestamp": "2021-11-23T14:15:18.624876-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55882",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1620
}
},
{
"timestamp": "2021-11-23T14:15:18.704478-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55884",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1726
}
},
{
"timestamp": "2021-11-23T14:15:18.716524-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55885",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1735
}
},
{
"timestamp": "2021-11-23T14:15:18.728933-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55886",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1482
}
},
{
"timestamp": "2021-11-23T14:15:18.740824-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55887",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1541
}
},
{
"timestamp": "2021-11-23T14:15:18.762227-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55888",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1517
}
},
{
"timestamp": "2021-11-23T14:15:18.774457-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55889",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1440
}
},
{
"timestamp": "2021-11-23T14:15:35.076482-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:55947",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1479
}
},
{
"timestamp": "2021-11-23T14:57:40.809734-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:58733",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 3410
}
},
{
"timestamp": "2021-11-23T14:57:40.835711-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:58734",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1513
}
},
{
"timestamp": "2021-11-23T14:57:40.847707-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:58735",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1524
}
},
{
"timestamp": "2021-11-23T14:57:40.860895-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:58736",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv1",
"duration": 1538
}
},
{
"timestamp": "2021-11-23T14:58:01.278975-0500",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.0.134:445",
"remoteAddress": "ipv4:192.168.0.104:58772",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "BLACKOUT",
"clientAccount": "homeuser",
"workstation": "BLACKOUT",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "homeuser",
"mappedDomain": "BLACKOUT",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannel
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
Your windows client is trying to use NTLMv1 authentication. This is _very_ unusual (and insecure). Perhaps an application you installed has altered registry settings? You'll want to fix this in your client.
 

Dodd

Cadet
Joined
Jan 10, 2019
Messages
7
oh! I've never heard of NTLMv1. I'm just using the built-in windows file explorer. I have 'AllStartBack" installed. I can't see why it would alter anything to do with networking. Do you have a tip to rectify this?

and thank you for pointing that out.
 

Dodd

Cadet
Joined
Jan 10, 2019
Messages
7
Success! I changed the registry value of LmAuthenticationLevel from 1 to 3 and VOILA!

You clearly know your stuff. Many thanks!
 
Top