QNAP Turbo NAS User Manual. QTS Basics and Desktop: System Settings: General Settings: Storage Manager. Password policy allows the administrator to set the minimum password strength of user passwords and to force users to change their passwords periodically. Thank you for choosing QNAP products! This user manual provides detailed instructions of using the Turbo NAS (network-attached storage). Please read carefully and start to enjoy the powerful functions of the Turbo NAS! The Turbo NAS is hereafter referred to as the NAS. This manual provides the description of all the functions of the NAS.
Hello, I am new to the forum as I have just received my QNAP. I would like to apologize in advance if I have formatted anything incorrectly or there is a problem with this post (I hope that I am posting this in the correct place). Thus far I am really happy with it and am going through the stages of setting it up and migrating my data over to it. Before I ask my question, please see the following for information pertaining to my NAS:NAS Information:
NAS Model: TVS-873
Firmware / QTS Version: 4.3.3.0154 (2017/04/13)
Operating System used when connecting to NAS: Windows 7 Pro / Mac OS X 10.11.6 (El Capitan)
Network Setup: Single Port
Highest SMB Version: 2.1
If possible, I would like to request some assistance from the community as I have been trying to read the user manual and Google for the answer, but thus far have come up short -
As I am connecting to the NAS using 2 different operating systems, I have enabled the networking services for Microsoft (SMB) and Apple (AFP). When browsing the network for shared folders on the NAS using the Mac, I am presented with only the shared folders for which the user I am connecting with has access. When browsing via the Windows 7 computer, ALL shared folders are visible despite the user having neither read nor write permissions (i.e. when connecting using the 'Guest' user, all shared folders are displayed). The permissions work properly as the user is not able to navigate into any of the folders for which they do not have permissions (prompted with a user dialog requiring login credentials), but I would like SMB to behave similarly to AFP (hide any shared folders that the connected user does not have read or write access to).
Things that I have tried to accomplish this goal:
1. Change 'Highest SMB Version' setting from 2.1 (I believe this is what the default setting was, please correct me if I'm wrong) to 3.0.Qnap Qts 4.3.4 Manual
This resulted in my NAS becoming inaccessible to the windows 7 computer. I changed it back and was again able to browse2. Enable 'Advanced Folder Permissions'
This did not seem to have an effect
Qnap Qts Software
3. Edited /etc/config/smb.conf to add 'hide unreadable = yes' (without the quotes of course)
In my search, I found the following two links suggesting that what I am looking to do is possible by editing the smb.conf configuration file:
https://forum.qnap.com/viewtopic.php?t=25638
https://helpdesk.qnap.com/index.php?/Knowledgebase/Article/View/295/0/how-to-enable-access-based-enumeration-for-windows-networking
I followed the directions by SSH into the NAS using the admin account, editing the smb.conf file to add 'hide unreadable = yes' under the [global] heading (last row under the heading and later further up), then restarting the service. I then disconnected the network computers from the NAS share, and issued the command to restart the smb service. This did not have the desired effect. Next I tried rebooting the NAS, but still no change. I then removed 'hide unreadable' from the [global] heading, and tried adding it under an individual folder heading, saving, then restarting smb. No change.
When I came across the help desk site I thought that I had found the solution. I was hoping that I would be able to add the hide unreadable flag to the global parameters list so that I wouldn't have to individually set this setting for each new folder that I create. If possible, I would like to avoid using ACL (as it would require folder by folder settings changes and I usually administer the NAS from the Mac).
Any help or guidance would be greatly appreciated. Thank you for taking the time to read this post.