Synology DSM 6 and Vintage Clients

I’ve been a Synology DiskStation NAS user for four years now and used them as a SMB file server which is, among other things, accessed from various vintage clients (OS/2, DOS, Windows 9x, etc.). After upgrading to DSM 6, I found that these clients no longer work. That is to say, any attempt to connect fails because the credentials are rejected.

The problem is that DSM 6 (essentially customized Linux + Samba) by default no longer accepts old-style LAN Manager passwords. Fortunately it is not difficult to fix, but it is a multi-step process.

  • If not already enabled, enable SSH access on the DiskStation and log in via your favorite SSH client.
  • Edit /etc/samba/smb.conf with sufficient privileges (with sudo vi, for example). In the [global] section, add a new line which says lanman auth = yes
  • Make sure the updated configuration is loaded (e.g. sudo smbcontrol smbd reload-config or rebooting the DiskStation).
  • Recreate password hashes.

The final step is not very obvious. One reason why servers do not like old-style LAN Manager authentication is that the server needs to store a cryptographically weak password hash. Okay, you don’t care about that. But if old-style authentication is enabled, the password hashes need to be re-created because they won’t exist.

It may be enough to re-set the password in the DSM user interface. If it is not, run sudo smbpasswd -L -U <username> on the DiskStation. To check if passwords have LAN Manager hashes or not, you can run sudo cat /etc/samba/private/smbpasswd on the DiskStation. If the third colon-separated field has lots of XXXs there is no LANMan hash.

Note that this problem applies to fresh DSM 6 installations as well as DiskStations upgraded from DSM 5. With upgraded systems, there is a possibility that existing LANMan hashes might survive in the Samba password file; on new installs the hashes definitely have to be re-created.

This entry was posted in Networking, Software Hacks, Storage. Bookmark the permalink.

6 Responses to Synology DSM 6 and Vintage Clients

  1. Lazaro Millo says:

    I have a DiskStation DS414 and have always wondered why I had the same issue with older versions of Windows. Thank you for sharing this solution.

  2. Well that explains why my old machines can’t map drives anymore! .. I haven’t had time to even begin to look, but thanks for doing the hard work for me!

  3. Michal Necasek says:

    Glad I could help — it was a bit of luck that I correctly guessed why my DOS VMs couldn’t get to the network shares after a DSM upgrade. And fortunately it’s more or less standard Samba, so not too hard to fix.

  4. DOS says:

    I remember having to change this setting on plain Linux machines a pretty long time ago. From searching the web, it looks like the default setting was changed in this way in Samba 3.2, which was released over 8 years ago! Lowering security like that sounds bad to me, but then I think most vendors that repackage open source projects do similar things.

  5. RetroKing says:

    Thanx! Works great! Now my vintage Win98 PC can access the NAS again 🙂

  6. MM says:

    Thank you, works great with my Win98SE Machine!

Leave a Reply

Your email address will not be published. Required fields are marked *