Thomas-M
Level 1 (67 points)
Servers Enterprise

Q: iOS File Share apps unable to access File Shares since 10.11.5

Since updating my server to OS X 10.11.5 & Server 5.1.5 I've run in to this problem.

 

Macs still access server file shares flawlessly as they always have - no problems there.

 

However multiple apps iOS apps (iPhone & iPad) for accessing network shares return the same message "Connection Failed With Error: Failed To List Files" when attempting to connect to my server shares, these apps worked fine until recent updates. Not limited to iOS 9.3.2 as I've tried from older devices and still receiving the same errors.

 

I use the same credentials on my Macs as i do on the iOS apps, never been a problem there.

 

Now the only thing that does work is Guest shares on the server, if i connect as a Guest user on the iOS apps, i am able to access guest accessible shares on the server, but thats it. All authenticated access is being rejected - even the admin account - which all works from my Macs..

 

However, if i access my MacBook (no server app ruling on that machine and running 10.11.5) file shares, they are able to access everything as per normal.

 

Where do i start?

Mac mini (Late 2012), OS X Server

Posted on May 18, 2016 8:46 AM

by ebaauw,Solvedanswer
ebaauw ebaauw
Level 1 (15 points)
A:

I can confirm that the issue is indeed that SMB signing is now forced on the Mac server by default.  The good news: this can be disabled manually by editing /Library/Preferences/SystemConfiguration/com.apple.smb.server.plist and add a new key:

     <key>SigningRequired</key>

     <false/>

After restarting the smbd process, the apps on my iPad can connect again, as before the 10.11.5 / server 5.1.5 upgrade.

Posted on May 24, 2016 9:09 PM

Close
Thomas-M

Q: iOS File Share apps unable to access File Shares since 10.11.5

  • All replies
  • Helpful answers

Page 1 Next

  • by zeumann,

    zeumann zeumann May 18, 2016 10:40 AM in response to Thomas-M
    Level 1 (9 points)
    Servers Enterprise
    May 18, 2016 10:40 AM in response to Thomas-M

    same here...

    https://discussions.apple.com/thread/7564787

  • by GGHulse,

    GGHulse GGHulse May 21, 2016 4:10 AM in response to Thomas-M
    Level 1 (12 points)
    Desktops
    May 21, 2016 4:10 AM in response to Thomas-M

    I experienced exactly the same issue with exactly the same setup when I made the mistake to "upgrade" OS X Server to 5.1.5. The only difference is my local admin user ID can access most shares from my iPad.

    Side note: Is Apple hiring Microsoft programmers for OS X Server? Really, this shouldn't happen, but I have a problem with FileBrowser on iOS devices each time there is an update.

  • by Thomas-M,

    Thomas-M Thomas-M May 21, 2016 4:25 AM in response to GGHulse
    Level 1 (67 points)
    Servers Enterprise
    May 21, 2016 4:25 AM in response to GGHulse

    I contacted a few devs about their apps and problems with OS X 10.11.5 and Sever 5.1.5 having rouble for iOS accessing shares.

    They've all been able to replicate the issue that a lot of people appear to be running in to. How can something that's been so robust get so broken.

  • by GGHulse,

    GGHulse GGHulse May 21, 2016 6:47 AM in response to Thomas-M
    Level 1 (12 points)
    Desktops
    May 21, 2016 6:47 AM in response to Thomas-M

    Is it possible, and if so how, to rollback to the prior version? I have Time Capsule enabled for the OS drive.

  • by ebaauw,

    ebaauw ebaauw May 22, 2016 12:19 AM in response to Thomas-M
    Level 1 (15 points)
    May 22, 2016 12:19 AM in response to Thomas-M

    Same here.  I can no longer connect from apps on my iPad to SMB shares on my Mac mini server, since the OS X 10.11.5 / server 5.1.5 update.  In the server log I'm seeing messages like:

     

    May 22 08:55:54 server smbd[3314]: signing is required, but <ip address of iPad> is not signing

    May 22 08:55:54 server smbd[3314]: session_setup_transact: activate_signing returned status 0xc000a000: status

     

    I would same that Apple now forces SMB signing and the iOS client apps don't support that.  I'm not too familiar with SMB, but signing seems to cause some 10%-15% overhead, so this could account for the loss of throughput in the other thread as well.

  • by zeumann,

    zeumann zeumann May 23, 2016 9:03 PM in response to Thomas-M
    Level 1 (9 points)
    Servers Enterprise
    May 23, 2016 9:03 PM in response to Thomas-M

    I have received some support from the gyus at Stratospherix Support, that might help in other cases also?

    We have upgraded our test OSX Server to El Capitan and upgraded the Server component to 5.1.5.  Now, when connecting, FileBrowser is required to prefix the username with either the WORKGROUP name or the NetBIOS name of the server.  These can be found on the “WINS” tab of the advanced screen of the Ethernet adapter page in the OSX Settings app on the server.  Using “WORKGROUP\testuser” in FileBrowser’s username field allowed us to connect again. Previously just “testuser” was acceptable.

  • by ebaauw,Solvedanswer

    ebaauw ebaauw May 24, 2016 9:09 PM in response to ebaauw
    Level 1 (15 points)
    May 24, 2016 9:09 PM in response to ebaauw

    I can confirm that the issue is indeed that SMB signing is now forced on the Mac server by default.  The good news: this can be disabled manually by editing /Library/Preferences/SystemConfiguration/com.apple.smb.server.plist and add a new key:

         <key>SigningRequired</key>

         <false/>

    After restarting the smbd process, the apps on my iPad can connect again, as before the 10.11.5 / server 5.1.5 upgrade.

  • by zeumann,

    zeumann zeumann May 24, 2016 12:10 PM in response to ebaauw
    Level 1 (9 points)
    Servers Enterprise
    May 24, 2016 12:10 PM in response to ebaauw

    Worked for me, thanks alot!

  • by Thomas-M,

    Thomas-M Thomas-M May 24, 2016 9:12 PM in response to ebaauw
    Level 1 (67 points)
    Servers Enterprise
    May 24, 2016 9:12 PM in response to ebaauw

    Done the trick. Also, some of the apps are now being updated to work.

    I use File Explorer, which will be updated soon to accommodate the new requirements for those who left Signing Required.

  • by Patrick Merel1,

    Patrick Merel1 Patrick Merel1 May 24, 2016 10:39 PM in response to ebaauw
    Level 1 (13 points)
    May 24, 2016 10:39 PM in response to ebaauw

    Probably useful but nowhere on my mac i have such a file: com.apple.smb.server.plist Strange !

  • by GGHulse,

    GGHulse GGHulse May 25, 2016 5:35 AM in response to ebaauw
    Level 1 (12 points)
    Desktops
    May 25, 2016 5:35 AM in response to ebaauw

    Please forgive my ignorance, but how/where do you add the new key? Where do I insert this text? Do I put your text between the <dict>? I'd rather ask then do it wrong. Here is my plist file. Thanks.

     

    <?xml version="1.0" encoding="UTF-8"?>

    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

    <plist version="1.0">

    <dict>

      <key>AllowGuestAccess</key>

      <true/>

      <key>DOSCodePage</key>

      <string>437</string>

      <key>LocalKerberosRealm</key>

      <string>LKDC:SHA1.FE1D4F7045F4454A1AD1E0BB7791A8FF96C0B2AC</string>

      <key>NetBIOSName</key>

      <string>MacServer</string>

      <key>ServerDescription</key>

      <string>MacServer</string>

      <key>VirtualAdminShares</key>

      <false/>

      <key>WINSServerAddressList</key>

      <array>

      <string>192.168.1.100</string>

      </array>

      <key>wins server</key>

      <array>

      <dict/>

      </array>

    </dict>

    </plist>

  • by ebaauw,

    ebaauw ebaauw May 25, 2016 6:06 AM in response to GGHulse
    Level 1 (15 points)
    May 25, 2016 6:06 AM in response to GGHulse

    Yes, anywhere in the top-level <dict> ... </dict> should be OK.  I put it just before the VirtualAdminShares key.  You can use plutil to check the syntax after editing the file.

  • by skynet3020,

    skynet3020 skynet3020 May 25, 2016 8:08 AM in response to Thomas-M
    Level 1 (9 points)
    May 25, 2016 8:08 AM in response to Thomas-M

    nice work thanks

     

    all shares such scanners and sonos working fine now

  • by GGHulse,

    GGHulse GGHulse May 26, 2016 4:31 AM in response to ebaauw
    Level 1 (12 points)
    Desktops
    May 26, 2016 4:31 AM in response to ebaauw

    Thanks. Worked perfectly. I didn't use the plutil because I didn't see how to employ it.  The following article might be useful to those who haven't edited configuration files before: OS X Server: How to edit configuration files - Apple Support.

Page 1 Next