Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / Accessing NAS with IP doesn't require password, why?

Author
Message
Phaelax
DBPro Master
22
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 18th Oct 2012 20:55
I have a buffalo linkstation NAS. Accessing the folders on it through its network name asks me to log in (as it should). However, I typed in the IP manually to access the folder that way and it doesn't ask for authentication. What gives? This seems like a rather big security hole to me.

And no its not because the login info was stored, I attempted the IP method first.

"You're not going crazy. You're going sane in a crazy world!" ~Tick
bitJericho
22
Years of Service
User Offline
Joined: 9th Oct 2002
Location: United States
Posted: 18th Oct 2012 21:07
How odd. I can't think of any reason that would be. I'd update the firmware and then contact support if still not working.

Visit my blog http://www.canales.me.
MrValentine
AGK Backer
14
Years of Service
User Offline
Joined: 5th Dec 2010
Playing: FFVII
Posted: 19th Oct 2012 02:52
Which model is it, and what NAS software is it using? FREENAS?

Phaelax
DBPro Master
22
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 19th Oct 2012 03:29
Probably whatever NAS software buffalo made for it. I have the current firmware version already.

It's the 4TB Linkstation LS-WV4.0TL/R1

"You're not going crazy. You're going sane in a crazy world!" ~Tick
MrValentine
AGK Backer
14
Years of Service
User Offline
Joined: 5th Dec 2010
Playing: FFVII
Posted: 19th Oct 2012 03:51
Page 33 onwards in the manual is where you want to be looking...

My guess is one of two... one you have not setup any users or groups, and two is you have not setup Access Restrictions... or such...

Have you looked through the navigator menus or the inbuilt interface?

I would suggest trying to make a user or group...

Or this
Quote: "Delegate Authority server feature"


or...

Quote: "Accessing the LinkStation with an Anonymous user:

To allow anonymous access to your FTP share, disable access restrictions on the FTP share.
Configure your FTP client as follows:
• Host Name IP address of the LinkStation
• Username anonymous
• Password any set of characters
• Port 21
Example ftp://192.168.11.150/"


Man does that thing have a plethora of security barriers... I have had a Buffalo drive before and must say their build quality and I believe they still use Hitachi drives [or well they did when I had one] just brilliant, so a good choice, I would suggest fiddling a bit more before wasting money [if any] calling tech support...

Van B
Moderator
22
Years of Service
User Offline
Joined: 8th Oct 2002
Location: Sunnyvale
Posted: 19th Oct 2012 10:05
We had a buffalo NAS box for backup at work, until it died and we had to replace it with a snazzy Netgear one. The buffalo drive lasted about 8 years, the Netgear box I'd happily throw in a skip.

Anyway, it depends on your setting I'm sure - you'll always need a password to access it's settings etc, but you can have it allow access without needing a password. I used the Buffalo NAS for user backups, so just having a direct route with no password made sense, just have a folder for each user and give them access to it, or give everyone access to it, whatever is required. It might just be that the NAS box knows your an admin user, or maybe it only relies on strict security if it's part of a domain.

Anyway, I would suggest just making a root folder and setting yourself permissions for it, that way you can set aside a public folder for things like videos you might want to access on a console, or your music collection, stuff you might want to access from anywhere on your network.

I got a fever, and the only prescription, is more memes.
Phaelax
DBPro Master
22
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 19th Oct 2012 19:40
Quote: ". one you have not setup any users or groups, and two is you have not setup Access Restrictions"


Nope, I've done both of those. I have separate accounts for full access and just read-only access.

I have FTP access disabled. And my older Buffalo used hitachi drives (which despite my skepticism has lasted the past 3 years without issue). This new model uses Seagate drives.

I'm not really at any security risk as I'm the only one on my network and my wireless is WPA2, but I'd still like to understand how //Linkstation requires a password but //10.x.x.x does not.

"You're not going crazy. You're going sane in a crazy world!" ~Tick
bitJericho
22
Years of Service
User Offline
Joined: 9th Oct 2002
Location: United States
Posted: 19th Oct 2012 22:29
My best guess is a flaw in the samba server configuration. That's why I suggested upgraded or calling support.

Visit my blog http://www.canales.me.

Login to post a reply

Server time is: 2025-05-17 12:43:01
Your offset time is: 2025-05-17 12:43:01