Can Android access encrypted SMB shares? - Miscellaneous Android Development

Hi!
I'm trying to catch up with Internet 2017, and I've read a lot about security lately. SMB can be encrypted and all, which makes it possible to make a SMB share available through internet fairly safe. If I were using SMB just inside my LAN, encryption would not be that important to me.
I've read various articles that say SMB1 should be disabled, and that you should enable SMB encryption. Link:
- Microsoft Blog, Edgar A. Olougouna: “SMB 3.1.1 Encryption in Windows 10”
https://blogs.msdn.microsoft.com/openspecification/2015/09/09/smb-3-1-1-encryption-in-windows-10/
- Microsoft Blog, Ned Pyle: “Stop using SMB1”
https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/
- US-CERT: “SMB Security Best Practices”
https://www.us-cert.gov/ncas/current-activity/2017/01/16/SMB-Security-Best-Practices​
I've run these commands on my computer, Powershell as Admin. First to disable SMB1 (restarts the computer afterwards),
Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol​and then to enable encryption globally:
Set-SmbServerConfiguration -EncryptData 1​
I've made a user with netplwiz, and given it read access to the shared folder.
Other Windows 10 computers handles this just fine. I can log in with the credentials and view the files, stream the media available etc.
But with android using Solid Explorer and VLC, I can't connect. I get an network error.
Am I doing something wrong, or aren't your app compatible with encrypted smb shares?
Anyone got some experience with this?
Devices i'm using btw:
- Nvidia Shield TV, running 7.0.0 (5.0.2 update)
- Nexus 5x, running 7.1.1
Any help is appreciated.

Seems like the real problem is that Android only will work with SMB1. Too bad :/

o-l-a-v said:
Seems like the real problem is that Android only will work with SMB1.
Click to expand...
Click to collapse
I don't think that Android as any kind of built-in SMB support, thus the culprits are rather Solid Explorer and VLC here.
So far I've been unable to find any working file manager alternative.

Related

Windows LAN connect help

My notebook (ubuntu) and my Archos % tablet can find my windows desktop lan just fine, but can't sem to get the gtabley to find it, no matter what i put in (Ip, sever name, etc). Any ideas? Tried using the es file explorer and set to lan--also tried ftp.
Try an app called Network Discovery
Try an app called Network Discovery.
I use this app to find all of the devices on my network.
Three printers,WII box,Windows Home Server,Laptops,etc.
Works well!!
Bill
It finds all the IP addresses but no ports open
Windows shares are an issue because of the lack of CIFS support on our device (but there's been a recent breakthrough there, thanks to VS giving us source). The Archos probably has this built-in, already, as well as uPnP.
FTP, however, should "just work" - if the ports on the target are showing as closed, it could be a firewall issue. Suggestion: Test this between two PC's on the same LAN first, to verify that connectivity is there. Then. attempt it from the GTab. Also, make sure the GTab is on the same VLAN as your other devices and that the wireless router isn't blocking connectivity, either.
roebeet said:
Windows shares are an issue because of the lack of CIFS support on our device (but there's been a recent breakthrough there, thanks to VS giving us source). The Archos probably has this built-in, already, as well as uPnP.
FTP, however, should "just work" - if the ports on the target are showing as closed, it could be a firewall issue. Suggestion: Test this between two PC's on the same LAN first, to verify that connectivity is there. Then. attempt it from the GTab. Also, make sure the GTab is on the same VLAN as your other devices and that the wireless router isn't blocking connectivity, either.
Click to expand...
Click to collapse
I don't understand the above. I've been able to access shares on my Windows machines fine, including shares on my Win7 laptop. The only problem I've been encountered were shares on my WinXP machine, where I have to connect anonymously. This was with ES File Explorer on stock 3053.
Jim
CIFS is the protocol that is used to access Windows shares. By default the GTablet does not support this or NTFS. You will need to add this support to the kernel. See:
http://forum.xda-developers.com/showthread.php?t=889088

[App] Root FTP server

Hi guys,
here is a new FTP server which runs on your rooted phone and enables you to remotely access all of your files on your phone for read/write (even /data, /system and / itself). If you like it, you can find it on Google Play.
Current version is: 1.20
Developer's page is here: http://waterdev.com/apps/rftp
Tutorial: http://www.goodandevo.net/2011/05/h...-evo-root-file-system-from-your-computer.html
Video tutorial: http://www.youtube.com/watch?v=kd1p0SAx9J8
----------
More info:
----------
Root FTP Server is an utility (ftp server) for Android to remotely access the file system with root privilegies over FTP protocol. You can access everything, even your /data /system or even / folder with read-write permissions. There are no restrictions. For that to work, you need a rooted phone. It really wont work without it. You also need to connect your mobile to the network (probably by wifi).
Instructions:
* Connect to your wifi network. Your computer must be able to reach your phone.
* Install the application.
* Press the start button, be patient, the installation will take a while. Once it is done, you will be asked for your user name. (If you have Superuser app, please see below.)
* Press the start button again, the server will start.
* Use any ftp client you like to access your files.
Issues:
* If you have the Superuser application installed, you MUST check "remember" and then click "enable".
* If your phone is not rooted, the server will NOT install.
* There is no password! Your username acts as a password as noone should know it. If you are prompted for a password, just hit enter (no password).
Connecting:
Use any ftp client. Totalcommander, windows explorer or whatever you like. The server runs at port 21. For passive connections, it uses ports 29000-30000. It is fully enabled ftp server with many features on. Url to connect will look like: ftp://[email protected]:21, or just ftp://192.16.1.1 and you will be prompted for you username and password. The username is what you entered in the application, password is empty (no password). If you are using windows explorer, please enter url in this format: ftp://[email protected] to your URL bar (e.g. ftp://[email protected]).
The server actually installes into your device to be available even without your sd-card. It will take about 1MB of space.
If you find any bugs contact me at [email protected]!
Well, what's the difference between yours one and SwiFTP, or even Samba? I'd prefer last one for it's stability, performance and functionality. (nothing personal, man)
Well, one big difference is that in Swiftp (not quite sure about samba) you cannot browse through data folder, you cannot download files there, you cannot write to the system directory etc. With Root FTP, you can. It does not have any of these limitations, it allows you to do anything on the filesystem.
I haveto try this
zeppelinrox said:
I haveto try this
Click to expand...
Click to collapse
Thank you, I appreciate any comments.
I updated the application and it now supports USB mode. That means that you can comfortably connect your phone to PC via USB and access the filesystem with root privileges from any file manager you like. For further instructions, visit the homepage.
A great new tutorial came out at www.goodandevo.net! Thanks to Gary.
Bought the full version, coiuldnt get it to work on my 3.1 xoom. Is this a known issue?
ftgg99 said:
Bought the full version, coiuldnt get it to work on my 3.1 xoom. Is this a known issue?
Click to expand...
Click to collapse
Hi, no, I have not tested it on devices 3.0+. However, if you could send an email at [email protected] (or just PM me) with a description of your problem, it would be very helpful. In case we cannot solve it, I will happily send you a refund.
video tutorial
A video tutorial here: http://www.youtube.com/watch?v=kd1p0SAx9J8
Bought this server and it works well but it is preventing my phone's screen from sleeping. No idea why that would be, very strange.
The app was updated. It now runs fine on Jelly Bean, has slightly improved design and some bugs were fixed.
Doesn't there need to be a free XDA version to advertise it here? Or did I miss it somewhere?
jacklebott said:
Doesn't there need to be a free XDA version to advertise it here? Or did I miss it somewhere?
Click to expand...
Click to collapse
Sorry, don't understand. What do you mean?
[ANNOUNCEMENT] To Devs, please read
"And remember, no links to payware and no limited beta's."
"You may use XDA for customer feedback of commercial software but no links to app."
Ok, I got it. I removed the link to the market. I guess it was here before such rules were imposed.
Galaxy note3 kitkat 4.4.2
Root FTP server does not work on Galaxy note3 (N9005) running KitKat 4.4.2.
Is there any log file to prove what is the problem pls. ?

[Q] Will Asus ever allow CIFS to be enabled?

The ability to mount Windows shares and read/write is a huge benefit. However you need root to do this. I hear the B70 models have a different key, so regular rooting methods dont work. I understand they had reasons to lock it, but now you limit huge benefit. Will they enable it on their stock stuff eventually?
Android devices by default are not designed to have their file systems capable of being manipulated remotely for security and stability reasons. It's the same reason why root access is not available by default.
These modifications void your warranty because Android is licensed out to the end user as an embedded firmware, and not designed as a user-installable client or server OS. Modifying the OS for unintended usage like a Samba server opens up the device to all sorts of mishaps due to the lack of security gained through rooting, and manufacturers do not want to take responsibility for that.
Using ES File Explorer i can read/write to SMB shares.
dude2k5 said:
The ability to mount Windows shares and read/write is a huge benefit. However you need root to do this. I hear the B70 models have a different key, so regular rooting methods dont work. I understand they had reasons to lock it, but now you limit huge benefit. Will they enable it on their stock stuff eventually?
Click to expand...
Click to collapse
No it will never happen unless Android as a whole get FUSE embedded directly, and even then that just means there are additional tools to prefent horrific lockups.
The problem is that Kernel level filesystems do not react well suddenly being dropped, stale mount point result in jammed native processes and all sorts of bother. Given that SMB over a network can (and does) drop out whenever it feels like it the filesystem<-> SMB mapping is never goign to pass muster on a commercial mobile device.
That said there is no reason you can't have an SMB client (Like ES explorer) that (Much like an FTP client) simply acts as an agent for recovering files. But apps that normally access local files would not be able to "see" files on an SMB share until they were transferred to the tablet.
Hmmm, that said... most people here are talking about "streaming". You could write an SMB client (Like ES explorer) that then opens up a simple http-server on 127.0.0.1 on an unprivileged port then translate that into an SMB client get... though I don't know how you'd do an index other than with a web browser. Hmmm

[Q] Android phone as SMB server - can't mount share! Please help!

Hello folks,
there are portable network storages with built-in WiFi and battery available like CloudFTP, Seagate Goflex Satellite etc. I always wanted such a thing because I could put all my music on this network storage, mount the storage on my tablet file system with CIFS Manager and use PowerAMP to index and access the music files in a comfortable manner. For me, it's important that the device has hotspot functionality because I want to be able to use the server even when no other WiFi or other wireless connection is available.
I had the CloudFTP, and it worked somehow, but it was very unreliable and in fact unusable (there are many complaints about lacking QC in the respective forums, by the way...) and I returned it. And the Goflex Satellite is only usable with a hacked firmware which is $35, so it's way too expensive.
So I had the following idea: My rooted SGS2 has mobile hotspot functionality and the app "Samba Filesharing" which works good. Why not use the phone instead of a CloudFTP?? Just connect a USB disk drive to the phone, and here you go!
Up to now, I can indeed access the storage on the phone from my (of course also rooted) Nexus 7 over a file manager like ES File Explorer. Works really well and easily fast enough! For watching videos or accessing documents this would be sufficient and the story would end here - but for using PowerAMP or Gonemad Music Player I have to MOUNT the server storage, otherwise indexing is impossible!
CIFS Manager seems not to be able to mount the server share! It always says that there is not such a device.
I already tried different URLs like "/192.168.43.1/" or "/192.168.43.1/SDCARD" or "192.168.43.1/sdcard" or "192.168.43.1/ANDROID" etc. - all with no success! :crying:
What am I doing wrong? Or is mounting not possible in this case??
Could someone test this on his setup and possibly suggest working settings parameters for CIFS Manager?
Thaaaaanks in advance!
Best Wishes,
Hasenbein
Nobody an idea??
Is it probably a port issue??

Troubleshooting Bliss OS 14.3

Not sure if I'm posting in the correct channel, if not, just let me know the right place to ask. Thank you.
I have an HP 11 Stream (ah117wm) laptop which has an embedded HD (32GB) and a Realtek wifi/BT m.2 card (rtl8822be); to which I installed Bliss OS 14.3-x86_64-202106261907_k-android12-5.10.46-ax86_m-21.1.3_r-x86_emugapps_cross-hd.iso.
As expected, the majority of things work fine, aside from the Wi-Fi/BT (can't enable either) as it seems no drivers are loaded for the hardware. I'm familiar with rooting phones and using Linux, but I'm new to android on pc's. My question is, how can I manually install/instruct the OS to said drivers? Would it be better to compile an android x86_64-Bliss os image for my device instead of using a currently available iso from their site to include the proper drivers for my hardware?
I haven't been able to find any post/forum with anyone using this particular laptop for Bliss OS. I can use the "[ROOT] alogcat" app to provide info. I also noted not all apps can gain root access amongst them are the Magisk app (can't identify the OS .img for direct patching), FX file browser can't access root dir access, and the default file manager doesn't see usb pen-drives (FX file browser does).
Any and all help you can provide is extremely welcome and appreciated as this OS flows fantastically on this device. Even Bliss os 15-android 12 runs butter smooth, albeit the same hardware issues.
hugoBOSS1981 said:
Not sure if I'm posting in the correct channel, if not, just let me know the right place to ask. Thank you.
I have an HP 11 Stream (ah117wm) laptop which has an embedded HD (32GB) and a Realtek wifi/BT m.2 card (rtl8822be); to which I installed Bliss OS 14.3-x86_64-202106261907_k-android12-5.10.46-ax86_m-21.1.3_r-x86_emugapps_cross-hd.iso.
As expected, the majority of things work fine, aside from the Wi-Fi/BT (can't enable either) as it seems no drivers are loaded for the hardware. I'm familiar with rooting phones and using Linux, but I'm new to android on pc's. My question is, how can I manually install/instruct the OS to said drivers? Would it be better to compile an android x86_64-Bliss os image for my device instead of using a currently available iso from their site to include the proper drivers for my hardware?
I haven't been able to find any post/forum with anyone using this particular laptop for Bliss OS. I can use the "[ROOT] alogcat" app to provide info. I also noted not all apps can gain root access amongst them are the Magisk app (can't identify the OS .img for direct patching), FX file browser can't access root dir access, and the default file manager doesn't see usb pen-drives (FX file browser does).
Any and all help you can provide is extremely welcome and appreciated as this OS flows fantastically on this device. Even Bliss os 15-android 12 runs butter smooth, albeit the same hardware issues.
Click to expand...
Click to collapse
UPDATE:
So I scrapped the 14.3 OS for 11.14 OS because the Wi-Fi /BT works. The downside is that the built-in updater menu doesn't connect to any servers to find updates. There are also issues with the microG suite replacement for Google Play Services, which causes limitations on which apps you can use, even if can install them. The included Aurora Store/Aurora Droid apps help update things out the box once you have internet access via Wi-Fi or in case you have a usb to ethernet adapter to get hardwired into your modem/gateway should you have issues getting wifi/BT to work. Some apps can't access play services to restore purchases such as Flipaclip as its tied to the platform (OS) store you bought it on, not your email like most apps are.

Categories

Resources