(SMB) User passwords not being saved in Fangtooth after reboot

After upgrading from Eel to Fangtooth, SMB connections failed as the user passwords in TrueNAS were gone. I re-entered existing User passwords (None were blank, but real passwords), I could connect again.
(I mentioned that in the Announcement thread 2 weeks ago and I understood some issues with SMB exists, so perhaps solved in next update?)

After rebooting the system last night (due to run away docker apps), I had to re-enter the passwords for every user again under Credentials → Users as SMB connections failed.
Never had this issue with Eel (or before).

I started with FreeNAS, and my users are in the 1000 series (currently is 3000 series I believe). Can this causes this?

Hopefully this is fixed in the upcoming update?
Related? NAS-135357 / 25.10 / Fix validation of NT hashes by anodos325 · Pull Request #16271 · truenas/middleware · GitHub

The existing issue, which that ticket is a fix for, is that in a previous version users were able to remove the password from an account by entering a blank string without using the Disable Password option. If there are any accounts on the system with SMB access enabled and a blank password in the database, then the SMB service will not work.

I’m curious how you determined that your existing passwords were missing though, because the GUI does not by default show existing passwords.

What I’m thinking may have happened, and this is a guess, is that reentering the passwords was enough of an update to get the service working in that session, but there is still one or more users with blank passwords hiding, and so the issue reappeared on boot.

Try entering the command midclt call user.query '[["smb", "=", true], ["unixhash", "=", "*"]]' to see if you have any such accounts.

1 Like

Thanks for the reply.
I normally don’t have or had any blanc passwords.
I noticed it first after the upgrade and thus after yesterday’s boot I tried re-entering passwords again as SMB failed. Then as soon as I re-enter the user password the SMB connection works again. But only for that specific user.
I have 2 TrueNAS users per macbook (one for normal shares and one for the time-machine-backup). I tried another macbook too, and only after re-entering that user’s password again in TrueNAS its SMB shares worked again. Thus I needed to re-enter 4 passwords for 2 macbooks, if that makes sense.

You command gives me 4 accounts. Which if I understand from your comment and command, have empty password users (‘*’ as hash).
E.g.:
uid 1002: guest
uid 88: mysql

I guess I should either remove them or give them a password then for else the whole system fails to use SMB service?

You can remove the accounts, give them a real password, or uncheck SMB User for those accounts

1 Like