Showing posts with label dhcast128. Show all posts
Showing posts with label dhcast128. Show all posts

Wednesday, 13 July 2011

FreeNAS fix for AFP connection issues with OSX Lion


The problem
I tried to connect to my FreeNAS box with Apple MAC OSX Lion over the AFP protocol and got an error message..  

There was a problem connecting to the server

The version of the server you are trying to connect to is not supported. Please contact your system administrator to resolve the problem.


The Solution
Apple disables support for the “DHCAST128″ in OS X 10.7 LION , which is commonly used by NAS boxes. Apple thinks it is insufficiently secure. So all the Vendors must work with Apple for Lion compatibility. However there is a workaround. You simply turn on or enable, DHCAST128 in Lion. Heres how you do it ..

To turn on “DHCAST128″ in Mac OS X Lion:-
1)  Launch terminal /Applications/Utilities/Terminal and do:

  • sudo chmod o+w /Library/Preferences
  • defaults write /Library/Preferences/com.apple.AppleShareClient afp_host_prefs_version -int 1
  • Now restart your computer.

2)  From Finder, select an AFP server, or use “Connect To…”.  This will cause the AFP Client to create the full preferences file
3)  Launch Terminal again and do:

  • sudo defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array “Cleartxt Passwrd” “MS2.0″ “2-Way Randnum exchange”
  • sudo chmod o-w /Library/Preferences
  • Now restart your computer.

Now try connecting to FreeNAS over AFP protocol - voila! all fixed. Until FreeNAS has been updated this workaround should be sufficient. I know it's less secure than Apple wants, but at the moment NAS boxes aren't ready for the enhanced security features of OS X Lion. I will be keeping an eye on the FreeNAS forum. When a fix has been released by the experts, I will update this post.


Note:  To add a “DHCAST128″ to the disable list, use
sudo defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array-add “DHCAST128″