OS X LION connection error with AFP and workaround

This time i wrote this post in english because i think this workaround will be interesting for a lot of people.

Ok the issue is that i tried to access my QNAP Turbo NAS TS-410 over AFP with OS X LION Developer Preview 2 and got a error message like this one above. I couldn’t login with a registered user on my QNAP NAS box. The guest account worked fine but no chance with a registered one.

So i found a solution and explanation at the Apple Developer Forum. Apple disables support for the “DHCAST128″ in OS X 10.7 LION , which is commonly used by NAS boxes. Apple thinks is it insufficiently secure. So all the Vendors must work with Apple for Lion compatibility.

To turn on “DHCAST128″ support please do the following:

1)  Launch /Applications/Utilities/Terminal and do:
sudo chmod o+w /Library/Preferences
defaults write /Library/Preferences/com.apple.AppleShareClient afp_host_prefs_version -int 1
Now restart your computer.
2)  From Finder, select an AFP server, or use “Connect To…”.  This will cause the AFP Client to create the full preferences file
3)  Launch Terminal again and do:
sudo defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array “Cleartxt Passwrd” “MS2.0″ “2-Way Randnum exchange”
sudo chmod o-w /Library/Preferences
Now restart your computer.

Note:  To add a “DHCAST128″ to the disable list, use
sudo defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array-add “DHCAST128″

 

I tried it at my OS X LION installation an it worked like a charm. I hope that all the Vendors like QNAP, Synology etc. will patch that in future firmware releases.

  • Volker

    many thanks! Now my iomega iconnect works with lion! Könntest auch ne deutsche Überstzung anbieten.

  • Pingback: Ben Wilkoff Network

  • Jawahar

    Good one.. Worked on an ix2-200 after a couple of false tries.. Thanks a ton!

  • http://www.facebook.com/sean.k.treadway Sean Treadway

    Worked like a champ for my LS-WTGLE RAID!

  • Pingback: Jorge Cortés

  • Pingback: Chris Lightfoot

  • Pingback: Shingo Sato

  • Chansi

    I download the latest firmware from synology.  I am trying to revert the setting which I follow from here but end up mess up all kind of connection to my NAS.  Is there a way where I can clear everything in the connect to function and redo the whole thing?  I am using another mac I have and connect through AFP and it is working fine so it is something to do with the changes I make after I follow the above instruction.  Please help.

  • Pingback: Milk

  • Pingback: Marc Juchli

  • http://twitter.com/74000Riffs Erin

    THANKS SO MUCH! I love you!! :D

  • Edvandro Santos

    Workfed fine to me on MyBookWorld II!!!

  • Gast

    The fix worked foine with 10.7 – butnow after 10.7.1 upgrade it does not work at all.
    Any suggestions ?

  • Djoertsch

    Thanks, works fine…:-)

  • Pingback: Adam Turetzky

  • Pingback: Hiroki Wakabayashi

  • Pingback: Francesco Tarantola

  • Yesnook

    work on my Linkstation Quad LS-QL/R5

  • Pingback: แก้ปัญหาปวดใจสำหรับท่านที่อัพเกรดเป็น Lion แล้วใช้งาน AFP ไม่ได้ | :: ETCPOOL BLOG ::

  • Pingback: LG WEBCARE NL

  • Tiagovieira

    Doesn’t work for my FANTEC MR-35DRN NAS. Continue to show the popup box where says that i don’t have permission to see content of the folder… 

    Since all my work is backed up to the NAS server, i have 2 solutions: FTP access or re-install Snow Leopard. Damn you Apple.  

  • Pingback: LG WEBCARE NL

  • Luke Lee

    worked like a dream…..thank you so much!

  • Pingback: Evolucion Mac Club Tampico » NAS LG N2A2, disco de red y aplicaciones de LG para iOS: A Fondo

  • Tonny Vernager

    Ich hatte keine Ahnung was die vershiedende Kommandos tat aber es hat funktioniert :) Ich bin neu auf mac. Vielen dank Darfur. Zur information ich habe ein DS209j und ein Macbook air.

  • Simon Scmp

    sorry didn’t work for me on lower afp server

  • Patrick

    Works for me!!!! Thank you so much!
    I have an Iomega StorCenter ix2.

  • Pingback: householdsteve

  • http://profiles.google.com/thetenzenmen shaun tenzenmen

    any idea what is going on here – when i write the file i’m getting these contents:

    (    “\U201cCleartxt”,    “Passwrd\U201d”,    “\U201cMS2.0\U2033″,    “\U201c2-Way”,    Randnum,    “exchange\U201d”)

    i have one drive working and another semi working :-(

  • Pingback: Marco Malacarne

  • Pingback: LG WEBCARE NL

  • Pingback: Billy Bob Trueblood

  • Stoffepilot

    Has anyone tried this on DNS-323

  • fweijers

    I did, and unclear if this was successful.
    After I boot my mac and open Finder there is no DLINK in the left bar (before LION there always was a network link, called DLINK in the left pane). After a while sometimes there appears a DLINK network connection
    And then after a while it’s dissapeared …
    If the DLINK is there, I can access the DNS-323 as usual.

    If anyone can tell me why this connection seems to toggle … 

    Anyway, my solution to have a proper network connection to the DNS-323 is this:

    in Finder go to “connect to server” and fill out this:
    smb:// and it works!
    Default the protocol is afp://

    Replace the afp with smb and this might be your solution.

  • Jesperws

    WORKS! Awesome, thank you so much :-)

  • Pingback: Richard van Aalst

  • Kieran Woodward

    brilliant! worked like a charm! thank you so much!

  • Pingback: LG WEBCARE NL

  • Pingback: LG WEBCARE NL

  • Pingback: LG WEBCARE NL

  • Pingback: LG WEBCARE NL

  • Pingback: LG WEBCARE NL

  • Pingback: LG WEBCARE NL

  • Gmoney

    is there a way to reverse this or go back to the original settings? It worked great but I have to connect to the server each time I restart. Let me know, thanks for the help

  • Pingback: LG WEBCARE NL

  • Pingback: BROUSSE Willy

  • Pingback: Jorge Corcuera

  • fronk

    Is the workaround still working after updating Lion to 10.7.2?

  • Anonymous

    It did not work for me in 10.7.2 with an iomega ix2-200 (tried it a couple times)

  • Pingback: Squozen