Post Reply 
 
Thread Rating:
  • 1 Votes - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Lack of security accessing Drobo FS from Mac?
04-18-2010, 07:47 PM
Post: #1
Lack of security accessing Drobo FS from Mac?
Hello - let me describe how I configured my FS and what I've observed.

I have two shares on the FS. One is the default public share, the other is one I created called "Media". The only user authorized on the Media share is the Admin user. I configured the FS and the shares from Drobo Dashboard 1.71 on my Windows 7 PC. I transferred files from my Drobo S to the FS. On the FS, the only share that is "checked" in Drobo Dashboard is the Media share, not the public share.

I went to an iMac running Snow Leopard which is on the same subnet. I opened Finder and the Drobo FS was recognized and it listed both the Public AND the Media share. I'm not sure whether it asked this when I first clicked on the FS or when I clicked on the Media share, but Snow Leopard asked me if I wanted to log on as an authorized user or as a guest. I thought I'd check security and I selected Guest, and I had full access to the Media Share! It appears there is NO actual security on the FS. Is that the case? Have I misconfigured the FS? I did not install Drobo Dashboard on the Mac, by the way.

Thanks!
Find all posts by this user
Quote this message in a reply
04-18-2010, 09:20 PM (This post was last modified: 04-18-2010 09:22 PM by oquinn.)
Post: #2
RE: Lack of security accessing Drobo FS from Mac?
guest is enabled by default per share that you create. When you create a share you need to make sure you delete the everyone/guest user account per share or make it read only
Find all posts by this user
Quote this message in a reply
04-18-2010, 10:33 PM
Post: #3
RE: Lack of security accessing Drobo FS from Mac?
The share in question, Media, has no Everyone user on the share. The only share that had Everyone was Public.However, Guest on the Mac was able to get to the Media share, even though there was no Everyone listed, just Admin.

(04-18-2010 09:20 PM)oquinn Wrote:  guest is enabled by default per share that you create. When you create a share you need to make sure you delete the everyone/guest user account per share or make it read only
Find all posts by this user
Quote this message in a reply
04-19-2010, 08:40 AM
Post: #4
RE: Lack of security accessing Drobo FS from Mac?
Can someone speak to this? I have the same problems on our FS. There is no one assigned to the share except the Admin and a single user, yet someone can access the share as guest only. Anyone?
Find all posts by this user
Quote this message in a reply
04-19-2010, 01:21 PM
Post: #5
RE: Lack of security accessing Drobo FS from Mac?
Posting a followup: Called tech support and Mac security not working is a known issue. Sorry, we'll have to wait for an update.
Find all posts by this user
Quote this message in a reply
04-19-2010, 05:11 PM
Post: #6
RE: Lack of security accessing Drobo FS from Mac?
Thanks for the followup call. Disturbing, but glad we know about it!
Find all posts by this user
Quote this message in a reply
04-19-2010, 08:40 PM
Post: #7
RE: Lack of security accessing Drobo FS from Mac?
Thanks mkertzman for bringing this to our attention. We have reproduced this problem and are hard at work on a fix. We will have a firmware update with a fix for this in it in the near future. We currently don’t have a way to work around this issue. We do know that the files are only available read only (so they can’t be deleted or changed by a random person). We appreciate your help in ensuring that everyone’s data is protected.

Director of Product Management
Data Robotics, Inc.
Find all posts by this user
Quote this message in a reply
04-20-2010, 08:51 AM
Post: #8
RE: Lack of security accessing Drobo FS from Mac?
Thanks, Dave - I'm glad it's going to get fixed in a firmware update. I look forward to seeing it soon!

Mitchell
Find all posts by this user
Quote this message in a reply
06-11-2010, 04:57 AM
Post: #9
RE: Lack of security accessing Drobo FS from Mac?
Has this issue been fixed yet?

Thanks!
Find all posts by this user
Quote this message in a reply
06-11-2010, 07:48 AM
Post: #10
RE: Lack of security accessing Drobo FS from Mac?
Yes it was fixed in dashboard 1.7.2

Jennifer "It's Control + check for updates"
Data Robotics Moderator
Support # 1-866-426-4280, Mon-Fri from 6am-6pm PST
Best Practices http://www.drobo.com/support/best_practices.php
Knowledge Base http://www.drobo.com/support/knowledgebase.php
To Open a Support Case: http://support.datarobotics.com/app/utils/login_form
Visit this user's website Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump: