SMB2 (or SMB3) support must be supported NOW!



Show first post

281 replies

Today is a happy day!

 

I have decided to no longer accept the SMB1 security risk or the Plex route. The Sonos equipment is sold, and I will NEVER return back to Sonos, remembering the financial loss I made.

My new equipment (best choice in WhatHifi 2020 review) warns that in case the connection to the NAS does not work, I may have to switch to SMB2/3 !  Welcome to normal network technology, in stead of bringing one new device after another while bringing NAS users at risk.

Bye bye Sonos and fellow Sonos owners!

 

Oh ...and a ‘warm welcome’ to the user that purchased your Sonos devices.👍

 

I am also affected. I understand that older hardware may be unable to support SMB2/3, but it is disturbing that SMB2/3 is not available in the Sonos ecosystem. Like others have mentioned, the S1/S2 split would have been a natural place to draw the line. Will be keeping an eye on developments in this area before investing further.

Userlevel 1
Badge +1

I agree with the previous posters. Sonos needs to start thinking about security for its customers. If this isn’t fixed, I will be moving away from Sonos altogether. 
This is a dealbreaker for me. 

Userlevel 1
Badge +1

LOL!  Exactly. Defending Sonos for obvious reasons. Like I said, take a look at the boards and understand what Sonos’s customers want. Step into the 21st century and give your customers something other than SMB1.   Otherwise people will leave. 
 

I have spent $1,000+ on Sonos and love the platform but if you think SMB1 is acceptable, then I am out along with a lot of other people on this board. 

Userlevel 7
Badge +22

Oh, forgot to add, I don’t work for Sonos and I have not been quiet or kind to them over many of their decisions that have had negative impacts on me.

A 20 minute / 20 buck fix to a minor problem just doesn’t rise to that level.

 

@Palle Louw 1 

There is a workaround for DSM7 Beta:

https://community.synology.com/enu/forum/20/post/139200

Userlevel 1

Take the time to go back and read the history on this issue. I’m not going to re-do all the work I’ve put in in the past and I expect others feel the same just to save you looking it up.

I will sum it up quickly, Sonos has long used an unsupported version of Linux that they have manually patched with the bare minimum stuff needed to stay secure. SMB didn’t make the cut because it required a newer kernel that wouldn’t fit on the older hardware. Making it worse the newer SMB is bigger too.

There is hope but it involves Sonos doing a new kernel and that is mind-bendingly difficult. Then they have to port all their patches and tweaks to the new kernel. Then they have to do the applications. And finally when the core is complete they need to port the Sonos software onto the kernel/GPL base.

Stanley, thanks for the summary. That explains it more clearly than the other posts I’d been flipping through. 

I don’t fully understand the kernal memory issue as I’m not that technical. Does Sonos still use the same kernal on both the S1/S2 hardware, so is that why the S2 hardware won’t be updated with a kernel supporting SMB2, even though S1 is now legacy equipment?

 

 

Come on SONOS get with the times when DSM 7 become GA. you will be getting a lot of calls as Synology do not support SMB 1.0 by default. 

Userlevel 7
Badge +22

Compared to the power that a Sonos device uses in sleep mode, roughly 3 to 8 Watts depending on the device, the 1 Watt that a Pi Zero draws isn’t much.

https://support.sonos.com/s/article/256?language=en_US

 

 

Userlevel 2
Badge

OK, I am now hit with this issue, I have the Synology DSM beta installed and I now cannot connect my Sonos system as they have disabled ntlmv1

More info here

[Update] Lost SMB access with NTLMv1 in DSM 7 Beta | Synology Community

I don;t understand what this means apart from I now cannot access my music

Userlevel 2
Badge

Yes I have done that but I wonder how long Synology will provide that!

Dunno but it should be OK with DSM 7 as it’s an additional add on. 
 

i think the main point here with SONS is for them to update there software so that this can be uninstall from DSM and reduce a security risk and get it working by default. 

Userlevel 7
Badge +22

My first choice would be for Sonos to drop SMB v1 and enable the new versions too.

As an alternative you can easily set up a gateway from your NAS, using any Linux supported protocol to the required SMB v1 for Sonos.

 

Not great but is sure beats burning your Sonos gear in the drive in protest. :-)

Another user affected by the upgrade to DSM 7 and losing access to the music folder.

Using android and synology, I do not see any options to cast music to sonos. 

@Sonos  - either support chromecast on sonos arc to cast from android or atleast upgrade to SMB 2 or 3 and allow access to the music files from within sonos app

 

Edit: updated to refer to sonos to support chromecast with Sonos Arc, One SL 

@Simmo1969 has already posted a solution in this thread. 

Synology, to my knowledge, maintains no official presence in these Sonos forums. You may be better off contacting their CS directly, as posting your unhappiness here likely has no impact on them (although will hopefully stoke the fires for Sonos, but we’ll have to see).

@Simmo1969 has already posted a solution in this thread. 

Synology, to my knowledge, maintains no official presence in these Sonos forums. You may be better off contacting their CS directly, as posting your unhappiness here likely has no impact on them (although will hopefully stoke the fires for Sonos, but we’ll have to see).

That solution didn’t work for me.

I did have the SMB service installed after DSM 7 upgrade and enabled SMB V1 - but still ended up with invalid username / password error message even though the share can be accessed with the same credentials from a Mac.

The method by which the speakers reach the shared location is via SMB v1, the same can not be said for the controller running on your computer. With SMB v1 now active, I would recommend that you submit a system diagnostic, and call Sonos Support to discuss it, or post the diagnostic number here for a Community Moderator to pick up.

There may be information included in the diagnostic that will help Sonos pinpoint the issue and help you find a solution.

When you speak directly to the phone folks, there are more options available beyond just the diagnostic analysis. 

Userlevel 7
Badge +22

My suggestion of using a NAS to SMB v1 gateway keeps looking better and better.

Not saying the issue isn’t real, just that it is a minor aggravation, not a show stopper.

I’ve not read all of it (and I won’t), but I read the sum up of page 6 of Stanley 4.
If not smb2/3 because of explained reasons then why not nfs? As far as I know NFS is smaller, less cpu intensive and more light weight than samba. (Samba/cifs comes from the windows side)
NFS is even linux nativ and most(good) NAS systems provide that as well.


I currently share my music via nfs to a virtual machine which is running nothing else than a samba server providing smbv1 as I don’t want that on my main server. And all that only for sonos.
I did spend some money on sonos, but I’m still missing a lot of devices across the house, I’m currently considering selling them and move to a different product if the situation does not improve.
After all, those devices are far away from cheap. One could expect that they spent some of that money in hardware that is more future proof than “that one kernel version that they build at day 1”.
I know many people that did not buy sonos just because of this situation here and they still laugh at me.

This is pure speculation but I could imagine that the real reason for them still running that same old kernel is because the’ve lost the one person building/maintaining it and now its a “black box” and nobody dares to touch it.

I join the requirements to introduce support for SMB2 and SMB3.  2022 is coming soon!

I’d buy in to that pure speculation, if I hadn’t have been in similar situations in the past, where only one person on the team had specific knowledge, and when that team member left, it was a pretty quick decision to have not only a rewrite of the software done, but ensure it was properly annotated, and multiple people were able to maintain it. That has happened to me, exactly once, and will never again. 

My own speculation remains that there isn’t enough available memory in the S1 devices to implement a new, larger, and SMB v x>1 kernel. Which is why I have some hopes that the next version of Sonos S2 that isn’t just bug fixes, will include a new kernel. I have zero expectations that any S1 only device would get it, so those who are running S2 capable devices under S1 would not garner the benefit. 

I join the requirements to introduce support for SMB2 and SMB3.  2022 is coming soon!

 

Read the thread, particularly the post above yours.  It’s already here. 

Userlevel 7
Badge +22

Sonos only offers the HTTP option for Windows and Mac, not NAS devices.

Security flaws in SMB v1 aren’t very scary as long as the SB v1 device contains no sensitive information of any kind. Also for Sonos use there is no reason not to firewall the SMB server away from the Internet completely.

 

NFS might be an option but it would also require some additional storage and memory and the older Sonos have been having features removed, some of which appear to have been removed to open up memory for newer features. Sonos releases little so all is based on speculation, not facts but it sure looks like a low memory situation. 

 

I’ll stick to one of two options, a dedicated SMB v1 Sonos music server, my current option. Second a NAS (any supported Linux protocol) to SMB v1 Gateway. Neither of which require any sensitive data. The Gateway, if using WiFi and not Ethernet will need your WiFi password though.

Userlevel 2
Badge

Sonos, this is ridiculous and thoroughly embarrassing.  You have a premium product for a premium price.  Stop acting like some cheap Chinese knockoff.  I suppose next you’re going to tell me only Internet Explorer and SSL 2.0 are supported on your website.

That would indeed be odd, since both of those run on your local device or the server,and not on the limited memory of the Sonos equipment.

Reply