[SMB] No authentication prompt when accessing share using 'user@host/folder'

Hi,

I’ve just setup Bazzite (atomic fedora) with KDE and was trying to access my SMB share (using ‘smb://host.domain.foo/share1/subfolder’).
I noticed, that I can access it without any authentication, as this specific share (‘share1’) is read-only accessible to anonymous users.

But as soon as I want to edit or create a file, it fails with a ‘permission denied’.
Even when specifying a permitted user to access this location with (using ‘smb://user@host.domain.foo/share1/subfolder’), I get a permission error and no chance to authenticate as my user.

One workaround I found was to go to my server and create a share (share-foo) that only this specific user has access to, not even enabling read-only access for anonymous users.
Trying to access share-foo, dolphin prompts me to authenticate. Here I can save my credentials and THEN have write access to my original share1.

Is there another way to force authentication in dolphin?
Or am I missing something obvious here?

This feels like a bug to me but I don’t want to rule out user error on my end.
What do you think?

Hi! I might be off here, as it’s been years since I had a Samba share active on my local network, but - what type of system is hosting the share?

I’m thinking of cases where anonymous access might technically be marked as allowed at an individual folder level, but is prohibited at the server level: Enable insecure guest logons in SMB2 and SMB3 for Windows client and Windows Server | Microsoft Learn

Hi @johnandmegh,
Thank you for the link and suggestion!

The share is hosted by an UnraidOS server and it’s security level is set to ‘secure’, meaning:

The share is secured and all users, including guests, have read access. You can select which of your users have write access.
~ (Source: Unraid Docs [Links are prohibited :frowning: ])

I also just noticed that I might not have explained my issue that well, I’ll try to clear it up:

My issue is not that anonymous- / guest-access is possible (It’s intended so I can access stuff in read-only without needing to log in).
My issue is that I wasn’t able to trigger any authentication flow in Dolphin to gain write access, although I had explicitely set a user in the connection string ‘user@host.domain.foo/share1

So my expectation is to get an authentication prompt when specifying a user in the connection string, that hasn’t been used prior (or saved in a credential store like kwallet).
Right now I need to access a share that no one except my intended user has access to, to actually trigger the authentication prompt through the samba server.

I hope that clears up any confusion of my initial question. :wink:

Thanks - is it accurate to list out the sequence of events like this?

Two shares on one server
Share A: Anyone can read, but only you can write
Share B: Only you can read or write

  1. Try to read A: Works
  2. Try to write to A: Denied
  3. Try to read B: Password prompt
  4. Try to write to A: Works

I don’t personally know enough about Samba beyond the very basics, but if that’s an accurate framing then hopefully others here can recognize either a configuration trick needed, or a bug :slight_smile:

1 Like

Yeah, your sequence is correct!
No worries, I hope anybody can enlighten me on this before I open a ticket at KDE. :wink:

@TekkertheChaot Did you ever find a solution to this?

I was working around ths issue by mounting my shares using fstab-mount-entries (and with the flag to make these mounts not a boot dependency / uncritical) and a locally stored credential file. Eventually, i moved to arch and away from atomic systems

Thanks for the feedback I got around it via user:pass within the smb

1 Like

Do you mean ‘user:pass@host/share’?

Correct smb://user:pass@host_IP/share

1 Like

Hi, I am in the same situation as OP and I’m baffled by the way Dolphin handles such a simple task that is to connect to a NAS using SMB without authentication by default.

No prompt, no asking what user I want to log into as… GNOME and Cinnamon have had this feature for a long time now. I don’t understand why no one bothered to make a default behavior that asks the user to enter login creds when attaching a drive.

This works fine on my system. (Arch)
And it can save my credentials.

Are you using the dolphin flatpak package ?
It should be the case on Bazzite.

Did you try launching dolphin from the commandline and checking what it outputs ?

Flatpak is difficult to run in for dolphin since dolphin uses many plugins but flatpak does not like it (rightfully for security).

I’ve had this issue with KDE since plasma 5. Its not a question of whether or not I can or can’t access a NAS SMB Share. It’s about the way I tend to need smb4k to save a default authentication config to access it in read/write, and launch it each time I log in instead of just being prompt to authenticate and save it for ever in Dolphin.

From my experience dating back to KDE4, it was always like that. (I’ve used Netrunner, KDE neon, Nobara) and the default behavior is always to automatically connect as Anonymous user.

Take a look at Gnome (ex. here being GNOME3), when you try to connect to a windows share, it ask you if you want to connect as a specific user instead of just defaulting to Anonymous (with no creds) by default.

The lack of prompt like this is what I find irritating in Dolphin (unless I’m missing something?) Like, sure, I can go and save it in a config file somewhere. But I would prefer for KDE to prompt me first to know what to do later with this connexion.

Would you care to help us fix this ?

As I said I don’t have this bug (and I don’t remember encountering it), so I can’t fix it by myself (I am a dolphin maintainer).

So there is something particular on your setup, something missing.

Are you connecting to a windows machine ?
Again do you have any trace ?

Complaining is fine, helping fixing things by tracking issues origin down is better.

It is FOSS, it moves forward only based on good will.

I’m on Bazzite, Dolphin is a native binary:

$ flatpak list | grep dolphin
$ which dolphin 
/usr/bin/dolphin

Specific bazzite setup:

$ rpm-ostree status
State: idle
Deployments:
  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite:stable
                   Digest: sha256:8fe30ba1e8a412c31ca62d8acb3bacfae398aad595b478c7d899a1663561ac7d
                  Version: 43.20251102 (2025-11-03T05:04:51Z)
            SecAdvisories: 4 moderate, 4 important, 1 critical
                     Diff: 2543 upgraded, 7 downgraded, 147 removed, 53 added
      RemovedBasePackages: ptyxis 49.2-1.fc43
          LayeredPackages: autorestic btrfsmaintenance konsole libcgroup libcgroup-tools picocom restic

● ostree-image-signed:docker://ghcr.io/ublue-os/bazzite:stable
                   Digest: sha256:ca0d9ff74c55fa3c4bc193594902cea00daf0ebd58420a4eaa5c8952705ffb5d
                  Version: 42.20251019 (2025-10-19T16:21:48Z)
      RemovedBasePackages: ptyxis 48.5-1.fc42
          LayeredPackages: autorestic btrfsmaintenance konsole libcgroup libcgroup-tools picocom restic

  ostree-image-signed:docker://ghcr.io/ublue-os/bazzite:stable
                   Digest: sha256:43b0a405fb12476ed3486cfe9f005b412bceea00fad9978e9f95496e30677ec8
                  Version: 42.20251011 (2025-10-11T17:38:14Z)
      RemovedBasePackages: ptyxis 48.5-1.fc42
          LayeredPackages: autorestic btrfsmaintenance konsole libcgroup libcgroup-tools picocom restic

flatpak …

Your issue is probably due to this. The package might not be correct, or dolphin needs fixing.

Like running dolphin from a terminal and see what text it outputs, I suspect it should give an explicit warning.

I don’t have the NAS setup required to replicate the exact steps, but so far, I’m not seeing that’s the case. Not a peep from stdout/stderr until I start looking at permissions.

Remember, on my Bazzite install, dolphin is a native binary, not a flatpak. So the entire flatpak permission model is out of scope (in my install, at least).

If the original peeps don’t reply this week, I’ll do my best to create some extra shares on my TrueNAS Scale box to try to replicate the issue more closely, but even without replicating the issue closely, just copying files between two Dolphin windows can get annoying on Bazzite. I’ve found myself resorting to smbclient more than once, and that is not a pleasant way to do things in comparison to Dolphin.

I’m using a fresh OpenSuse Tumbleweed install with Dolphin as a default with KDE Plasma.

I too have issues with the SMB not prompting me for credentials. For example I did a fresh initial boot yesterday (new HD and fresh install) and was happy because it prompted me to connect to my SMB share, I entered my creds and it worked as it should. I rebooted this morning and now there is no prompt and it won’t connect to the SMB share (because, apparently, I am trying to connect as AnonymousUser if this thread is accurate).

I can’t seem to determine the behavior, honestly - why it worked yesterday, then not today. Sometimes prompting, sometimes not. And there do not appear to be any options that I have been able to find to either set smb information, reset it, or even view what it’s doing.

I’d love to help out if I can, although I am new to all of this but have some programming experience.

You can enable more log output. (kdebugsettings)

You launch dolphin from the command-line and see its output or looking in journalctl -t dolphin.

You could find some helpful information.