# How does Duplicati access network shares?

**URL:** <https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681>\
**Category:** Support\
**Created:** [December 8, 2017, 8:56am UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681 "2017-12-08T08:56:22Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![tophee](https://forum.duplicati.com/user_avatar/forum.duplicati.com/tophee/32/21_2.png) [@tophee](https://forum.duplicati.com/u/tophee)\
**Post date:** [December 8, 2017, 8:56am UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/1 "2017-12-08T08:56:22Z")

</div>

Continuing the discussion from [Duplicati can't access file even after access rights have been granted](https://forum.duplicati.com/t/duplicati-cant-access-file-even-after-access-rights-have-been-granted/1666/15):

> [@Duplicati can't access file even after access rights have been granted](https://forum.duplicati.com/t/duplicati-cant-access-file-even-after-access-rights-have-been-granted/1666/15):
>
> The current version of Duplicati doesn’t make use of the Credential Manager, but there are plans to use the CM for storing passwords in future versions. So if credentials for accessing your NAS are stored in the CM, Duplicati isn’t aware of it.

Hm, then I have no idea how duplicati is managing to access my NAS at all. Because as far as I know, the access credentials are indeed stored in the CM (or where else would they be stored?). I can say for sure that I have not entered any access credentials into duplicati (apart from those for the backend).

---

<div class="post-metadata">

**Author:** ![kees-z](https://forum.duplicati.com/user_avatar/forum.duplicati.com/kees-z/32/29_2.png) [@kees-z](https://forum.duplicati.com/u/kees-z)\
**Post date:** [December 8, 2017, 10:39am UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/2 "2017-12-08T10:39:33Z")

</div>

If a shared folder on the NAS is a backup target, you can supply the credentials in step 2 of the Add Backup wizard.

If you want to make a backup of a shared folder on the NAS (applies to your situation), I guess (not sure) this is how it works:

- access to the shared folder is tried without authentication (works if guest access is enabled for the shared folder)
- access to the shared folder is tried with the current credentials (the credentials that are used to start the Duplicati server).

If both don’t work, access is denied.

---

<div class="post-metadata">

**Author:** ![tophee](https://forum.duplicati.com/user_avatar/forum.duplicati.com/tophee/32/21_2.png) [@tophee](https://forum.duplicati.com/u/tophee)\
**Post date:** [December 8, 2017, 3:49pm UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/3 "2017-12-08T15:49:18Z")

</div>

> [@kees-z](#):
>
> access to the shared folder is tried with the current credentials (the credentials that are used to start the Duplicati server).

Yes, that is what I suppose is happening. But where do those credentials come from if not from the credential manager?

---

<div class="post-metadata">

**Author:** ![kees-z](https://forum.duplicati.com/user_avatar/forum.duplicati.com/kees-z/32/29_2.png) [@kees-z](https://forum.duplicati.com/u/kees-z)\
**Post date:** [December 8, 2017, 4:07pm UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/4 "2017-12-08T16:07:58Z")

</div>

I don’t know how the mechanism works exactly, but I guess it’s just an in-memory process. You logged on after booting the PC, probably by supplying a password. Windows can try to authenticate to the NAS using these credentials without having to consult the Credential Manager. The Credential Manager is used for all other resources you have to authenticate for (websites, email accounts, shared folders you have to authenticate with another account than your current account).

---

<div class="post-metadata">

**Author:** ![kenkendk](https://forum.duplicati.com/user_avatar/forum.duplicati.com/kenkendk/32/5305_2.png) [@kenkendk](https://forum.duplicati.com/u/kenkendk)\
**Post date:** [December 10, 2017, 9:45pm UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/5 "2017-12-10T21:45:02Z")

</div>

When accessing an CIFS share in Windows, you will automatically authenticate with the logged in user. Depending on the setup, this may or may not work.

This is done completely by Windows and transparent for Duplicati.

Could it be that this is happening?

---

<div class="post-metadata">

**Author:** ![tophee](https://forum.duplicati.com/user_avatar/forum.duplicati.com/tophee/32/21_2.png) [@tophee](https://forum.duplicati.com/u/tophee)\
**Post date:** [December 10, 2017, 9:50pm UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/6 "2017-12-10T21:50:22Z")

</div>

> [@kenkendk](#):
>
> When accessing an CIFS share in Windows

Yes, my NAS shares are CIFS shares.

That solves the confusion around duplicati not using the CM, but still leaves the original issue a puzzle:

> [@Duplicati can't access file even after access rights have been granted](https://forum.duplicati.com/t/duplicati-cant-access-file-even-after-access-rights-have-been-granted/1666):
>
> One of my backups included a file (default.m3lib) to which it had no access rights. I changed the access rights using NAS:~# chmod o+r default.m3lib so now it looks like this: -rw----r-- 1 root root 9537289 Aug 3 01:38 default.m3lib I have verified that I can access this file (and duplicati is running as a service under my username) and it works fine. But duplicati still keeps complaining about not being able to access it. Why? 6 Dec 2017 23:50: Message Failed to process path: \\NA…

---

<div class="post-metadata">

**Author:** ![kenkendk](https://forum.duplicati.com/user_avatar/forum.duplicati.com/kenkendk/32/5305_2.png) [@kenkendk](https://forum.duplicati.com/u/kenkendk)\
**Post date:** [December 10, 2017, 11:28pm UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/7 "2017-12-10T23:28:26Z")

</div>

> [@tophee](#):
>
> but still leaves the original issue a puzzle:

Was that not resolved? It was two different shares?

---

<div class="post-metadata">

**Author:** ![tophee](https://forum.duplicati.com/user_avatar/forum.duplicati.com/tophee/32/21_2.png) [@tophee](https://forum.duplicati.com/u/tophee)\
**Post date:** [December 11, 2017, 12:06am UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/8 "2017-12-11T00:06:41Z")

</div>

> [@kenkendk](#):
>
> Was that not resolved? It was two different shares?

Yes and no. The way I reported the issue and tested various solutions was wrong because I was looking at the same file on two different shares without noticing it. But (and I think I have not yet reported this part of the story) when I discovered the mistake, the first thing I did was just delete the file (the one that had actually been causing the error all along). This deletion worked fine, which means that I had full access to that file but duplicati nevertheless did not get access.

When I realized that this was equivalent to the original problem, I thought I might aswell check if it gets solved by changing the access rights, this time on the correct file. So I undeleted the file (moved it from the recyle bin back to where it was), changed the permisions using

> [@Duplicati can't access file even after access rights have been granted](https://forum.duplicati.com/t/duplicati-cant-access-file-even-after-access-rights-have-been-granted/1666/1):
>
> chmod o+r default.m3lib

What happened thereafter is reported here:

> [@Duplicati can't access file even after access rights have been granted](https://forum.duplicati.com/t/duplicati-cant-access-file-even-after-access-rights-have-been-granted/1666/22):
>
> The backup job completed with a fatal error:
> 
> 8 Dec 2017 21:42: Message  
> Fatal error  
> Duplicati.Library.Interface.UserInformationException: Found 1 files that are missing from the remote storage, please run repair  
> at Duplicati.Library.Main.Operation.FilelistProcessor.VerifyRemoteList(BackendManager backend, Options options, LocalDatabase database, IBackendWriter log, String protectedfile)  
> at Duplicati.Library.Main.Operation.BackupHandler.PostBackupVerification()  
> at Duplicati.Library.Main.Operation.BackupHandler.Run(String sources, IFilter filter)
> 
> I did not run repair but just ran the backup again. And this time it finished without any error. Phew!

In other words, it worked as expected. But what remains unexplained, why I was able to delete that file _before_ changing the access rights while duplicati was not able to even read it.

I realize that this may be very much of an edge case, so that I don’t blame you if you just leave it and attend to more important stuff.

---

<div class="post-metadata">

**Author:** ![kenkendk](https://forum.duplicati.com/user_avatar/forum.duplicati.com/kenkendk/32/5305_2.png) [@kenkendk](https://forum.duplicati.com/u/kenkendk)\
**Post date:** [December 11, 2017, 11:54am UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/9 "2017-12-11T11:54:54Z")

</div>

> [@tophee](#):
>
> In other words, it worked as expected. But what remains unexplained, why I was able to delete that file before changing the access rights while duplicati was not able to even read it.

I have no explanation for that. Duplicati just opens the file and attempts to read it. It opens the file in the least intrusive mode possible (non-exclusive read), so it should get access to the file. I am guessing it has something to do with how SAMBA handles the gap from POSIX (Linux) permissions to Windows AD/ACL. Maybe it just caches stuff, so that the delete/undelete fixed the cached permissions?

In any case, the error:

```plaintext
Found 1 files that are missing from the remote storage, please run repair

```

Is not related to the `default.m3lib` file.  
This error message means that a `dlist`, `dindex` or `dblock` file was missing from the remote storage. As I mentioned elsewhere this is only the file listing (i.e. doing `ls` or `dir` on the remote folder) and does not attempt to read or open any file.

---

<div class="post-metadata">

**Author:** ![Kalico](https://forum.duplicati.com/letter_avatar_proxy/v4/letter/k/8baadc/32.png) [@Kalico](https://forum.duplicati.com/u/Kalico)\
**Post date:** [May 16, 2018, 11:38am UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/10 "2018-05-16T11:38:26Z")

</div>

I hope this thread isn’t too old to get my note added. If you can point me to a more recent/relevant post that would be great.

Quite simply, I want to run a Duplicati backup from my Ubuntu laptop to my Ubuntu media server. It seems difficult, which makes me think I am missing something, because Dupicati otherwise looks very smooth and easy (thank you).

I have created a folder on the media server and shared it. On my laptop, I can see the folder and read/write with it. It shows as smb://mediaserver/backups.

In the browser GUI for Duplicati, I’m not sure if I should set as the “Storage Type” that it is a local file/folder or use something like SSH. If I select local, then nothing shows up as the share on the server, but if I select SSH, then it doesn’t seem easy to put the smb:// address in.

I’m sure it must be a straightforward task to do this local backup over my LAN. It was certainly easy to make a backup to an attached USB hard drive. After this, my next task is to backup to Amazon S3. But I’m a bit stuck at this LAN backup. Can anyone help? Thanks.

---

<div class="post-metadata">

**Author:** ![JonMikelV](https://forum.duplicati.com/letter_avatar_proxy/v4/letter/j/439d5e/32.png) [@JonMikelV](https://forum.duplicati.com/u/JonMikelV)\
**Post date:** [May 16, 2018, 2:23pm UTC](https://forum.duplicati.com/t/how-does-duplicati-access-network-shares/1681/11 "2018-05-16T14:23:18Z")

</div>

It looks like you’ve posted this twice so I’m going to point people to the standalone topic if they wish to respond.  
[https://forum.duplicati.com/t/backing-up-over-a-lan-laptop-to-server-all-ubuntu/3585](https://forum.duplicati.com/t/backing-up-over-a-lan-laptop-to-server-all-ubuntu/3585)
