Persistent credentials with SMB

is this a bug? in CATALINA . If I connect to a WINDOWS network machine with smb://xyz and enter credentials, then I can log in to it.

BUT after that there does NOT seem to be a way to forget that connection.

It just persists even after I delete the password from KeyCHAIN.

It only disappears if I delete it in Keychain and then restart the Mac.

That has got to be a security issue right?

Mac Pro, macOS 10.13

Posted on Jul 21, 2020 3:33 AM

Similar questions

How Do I Remove SMB Authentication? I’m using a MacMini (Catalina) with an external Media Drive. I’m trying to access videos on the media drive using VLC on Apple TV4; I can get to the drive, but then I get this dialog: SMBv1 authentication required The computer (MAC-MINI) you are trying to connect to requires authentication. Please provide a username (ideally a domain name using the format DOMAIN;username) and a password. There's no password/login for the Media Drive. I tried these instructions (I can't promise I did them correctly): How to disable SMB 1 or NetBIOS in macOS - Apple Support --- I rebooted, but nothing changed. Thank you very much for any help.
6904 13
Network user cannot authenticate to access shared folders I have a brand new Mac mini (macOS Catalina) where I setup a local user (administrator). I bound it to a OpenDirectory server (hosted on an older Mac mini) where I stored the credentials of another user (user1). The binding was successful because I can see the "user1" in the Directory Utility on the brand new Mac mini. Moreover, on the brand new Mac mini I switched the "Remote Login" on for all the users and I verified that I can access remotely via ssh from my MacBook Pro by using both the local user "administrator" and the network user "user1". Therefore, the authentication seems to work correctly on the Mac mini. Then, on the desktop of the brand new Mac mini I created a new folder (test). I went again in System Preferences/Sharing and I switched on the "File Sharing": I added the test folder in the Shared Folders and I added both administrator and user1 in the Users window (give them "Read & Write" permissions). To test the file sharing, I used again my Macbook Pro, and I used the SMB protocol to access the shared folder: with the user "administrator" I can access it but with the network user "user1" the authentication fails. I searched in the forum and I found this discussion https://discussions.apple.com/thread/251063599 that reports a similar issue and that was solved by adding the missing SMB-NTLMv2 authentication method in the authentication server as explained in https://discussions.apple.com/thread/6053980. However, I checked the list of all the authentication methods available on my authentication server by the command: dscl /LDAPv3/127.0.0.1 read / AuthMethod and the dsAuthMethodStandard:dsAuthSMBNTKey item is already present. In fact, when I try to add that method with the command: dscl -u diradmin -p /LDAPv3/127.0.0.1 -append /Config/dirserv apple-enabled-auth-mech SMB-NTLMv2 I got the message error: <main> attribute status: eDSSchemaError <dscl_cmd> DS Error: -14142 (eDSSchemaError) I cannot think to other causes that prevent the network user to access the shared folder while the local user does. Do you have hints or advices to solve this issue? Thank you for any suggestion, Emiliano
2453 2
How do I remove authenticated Open Directory binding to itself? In attempts to solve my file sharing issues I have at some point on macOS Mojave + Server, using Directory Utility, bound the Open Directory server to itself using Directory Utility (I was quite desperate). Now, with all the changes I made I was able to get the client machine use authenticated binding to the server machine and now SMB file sharing works. So far so good, but I cannot change the passwords of users anymore. When I try, I get the following error: existing connection is not authenticated and the old password is not present: password change denied DNS is ok. What I can find is that in the past one could 'rekerberize' the server but that information is old (Mavericks) so I don't want to try. I was looking at removing the local authenticated binding on macOS Mojave Server. But in Directory Utility that is greyed out. And I do not dare to remove/recreate the LDAP server with Directory Utility on a production server yet (very scared). Is there a way to remove the authenticated binding of the server computer to its own OD server?
1250 2

There are no replies.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Persistent credentials with SMB

Welcome to Apple Support Community

A forum where Apple customers help each other with their products. Get started with your Apple Account.

Learn more Sign up