[Samba] Make samba look like a Windows 2000 machine

[Peter Milesson]

On 16.04.2025 20:28, Andrew Pattison via samba wrote:
> Hi all
>
> I've got an odd problem that I hope you can help me with. I recently bought
> an old Sonos music player, and I want to connect it to my music library,
> which resides on a Raspberry Pi. Because it is an old Sonos box, it only
> speaks SMB1. It also seems to be extremely picky about which SMB1 systems
> it will talk to. I have been able to get it to use a share on a Windows
> 2000 VM, and for the Windows 2000 VM to use a share on my Pi running
> Raspberry Pi OS (based on Debian), but the Sonos won't use the share on the
> Pi.
>
> Can anyone tell me what else I need to set to make samba look more like
> Windows 2000? My smb.conf is:
>
> [global]
> min protocol = NT1
> max protocol = NT1
> ntlm auth = yes
> ntlm auth - ntlmv1-permitted
> lanman auth = yes
> raw NTLMv2 auth = yes
> workgroup = WORKGROUP
> server string = %h server
>
> security = user
> encrypt passwords = true
> passdb backend = tdbsam
>
> valid users = andrew
> force user = andrew
> force group = andrew
>
> [music]
> path = /home/andrew/Music
>
> Thanks
>
> Andrew.
Hi Andrew,

Last year I setup an isolated data server for a machine group equipped 
with NC-control systems, using Windows NT4 and Windows 2k. OS Debian 
Bookworm with Samba version 4.21.2 from backports. Now when it's 
working, I wont touch it. It will live until the last NC-machine dies 
(no more spare parts).

My smb.conf looks like below, and is working. I guess you need to tweak 
and test, it definitely wasn't plain sailing.

Best regards,

Peter

/etc/samba/smb.conf
-----------------------------
[global]
         workgroup = MYGROUP
         server role = standalone server
         security = user
         client min protocol = NT1
         server min protocol = NT1
         ntlm auth = yes
         client NTLMv2 auth = Yes
         lanman auth = yes
         max log size = 0
         name resolve order = lmhosts bcast host

         disable netbios = no

         disable spoolss = yes
         load printers = no
         printcap name = /dev/null
         printing = bsd

         log file = /var/log/samba/log.%m
         panic action = /usr/share/samba/panic-action %d

         map acl inherit = yes
         vfs objects = acl_xattr

[Myshare]
         comment = Directory for Laser files
         readonly = no
         browseable = yes
         path = /data/samba/mydata
         invalid users = +guest
         valid users = readonlyuser @adminusers
         admin users = @adminusers
         read list = @readusers
         write list = @adminusers
         create mask = 0775
         directory mask = 0775
         force directory mode = 2775
         acl group control = Yes
         inherit permissions = Yes
         inherit acls = Yes
         inherit owner = Yes