Page 1 of 1

Add secutiry layer to NAS

Posted: Tue Mar 31, 2020 7:24 pm
by FruitChopper
So today ive set up a simple NAS to use in my home network. It works pretty well but i want to improve the security layer.
So when i try to login to the pi trough Windows Explorer, it asks for a username and a password so thats great.
When i connect to the NAS trough any browser it doesnt ask for a username nor a password :shock: . How can i also add a password and username there? Right now everybody (with the right ip adress) in the network can find my files without a password/username.
If you have a solution or suggestions please let me know :D
Sorry for my broken english, I try my best!

Re: Add secutiry layer to NAS

Posted: Tue Mar 31, 2020 10:25 pm
by epoch1970
Basically you can manage access security at 2 levels,
- in the application, by tweaking settings in that mysterious NAS of yours,
and/or
- below, at the network layer.

Normally a NAS sits in your LAN, it doesn’t have to protect itself against ennemies. So it’s probably not going to provide that many features. Check the documentation that came with it.

At network level you could setup a firewall on the machine that runs the NAS, or put it in a separate network, and use a router to defend the perimeter.

Re: Add secutiry layer to NAS

Posted: Tue Mar 31, 2020 10:33 pm
by thagrol
Without more information from you no-one is going to be able to help.

Did you follow a particular guide or tutorial?

What OS are you using on the NAS?

Which web server are you using on the NAS, if any?

Which web browser were you using?

Was that browser access from the local machine or from another machine on your network?

If a remote machine, had you already logged into the server via explorer on that machine? If you had already logged in, both the NAS and windows will know that and are unlikely to prompt again even when using a different app on the client for access.

Re: Add secutiry layer to NAS

Posted: Wed Apr 01, 2020 7:21 am
by FruitChopper
thagrol wrote:
Tue Mar 31, 2020 10:33 pm
Without more information from you no-one is going to be able to help.

Did you follow a particular guide or tutorial?

What OS are you using on the NAS?

Which web server are you using on the NAS, if any?

Which web browser were you using?

Was that browser access from the local machine or from another machine on your network?

If a remote machine, had you already logged into the server via explorer on that machine? If you had already logged in, both the NAS and windows will know that and are unlikely to prompt again even when using a different app on the client for access.
Hi Thagrol,

Thanks for your reply on my post. I posted this without doing a lot of research :? . What you said on the bottom was right. When you try to go to your pi's ip adress in a random browser it checks if you have logged in on the server in windows explorer.
I am using Raspbian with Samba, Ive used a couple of guides and combined them because some of the tutorials were outdated...

Thanks for the help!!