TrueNAS Core 12 User and Group ACL Permissions and SMB Sharing
ฝัง
- เผยแพร่เมื่อ 22 ก.ค. 2024
- Connecting With Us
---------------------------------------------------
+ Hire Us For A Project: lawrencesystems.com/hire-us/
+ Tom Twitter 🐦 / tomlawrencetech
+ Our Web Site www.lawrencesystems.com/
+ Our Forums forums.lawrencesystems.com/
+ Instagram / lawrencesystems
+ Facebook / lawrencesystems
+ GitHub github.com/lawrencesystems/
+ Discord / discord
Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 lawrence.video/swag
AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 www.amazon.com/shop/lawrences...
UniFi Affiliate Link
🛒 store.ui.com?a_aid=LTS
All Of Our Affiliates that help us out and can get you discounts!
🛒 lawrencesystems.com/partners-...
Gear we use on Kit
🛒 kit.co/lawrencesystems
Use OfferCode LTSERVICES to get 5% off your order at
🛒 lawrence.video/techsupplydirect
Digital Ocean Offer Code
🛒 m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
🛒 hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
🛒 www.privateinternetaccess.com...
Patreon
💰 / lawrencesystems
⏱️ Timestamps ⏱️
0:00 TrueNAS Core 12.0 Permissions
2:08 Creating a new dataset for SMB
2:36 Creating and Setting ACL Permissions
5:24 TrueNAS Strip ACL Permissions
6:24 TrueNAS Create Windows SMB Share
8:29 Testing TrueNAS Shares in Windows 10
9:30 Creating User and Assigning Groups for Shares
13:03 Checking ACL from command line using getfacl
14:11 Configuring multiple Advance ACL items
#TrueNAS #NAS - วิทยาศาสตร์และเทคโนโลยี
even now, 3 years later, this video helped me fix the permissions in truenas. Appreciate everything you do.
same
Same here.
same here as of today
Thanks so much Tom, I realize the video is a bit older, but man you just make it all so easy. Thanks a bunch. Definitely my go to and recommended YT tech guru. Cheers my man.
Thanks for the clear explanation, I'm new to truenas and I never worked with ACL so this video was very helpful.
man appreciate this guy, all the way from my first true nas 10.1 till 13.0 he been there every step
Tysm. Was having issues accessing the folder within the file explorer but after following your tutorial I managed to gain access to it.
Brilliant video, very clear and well explained. Thank you!
I just upgraded and changed out some hardware. I could not get back to the previous network permissions. This video saved my evening! Thank you!
Tom, Your my "Go To" guy for when I set up a new TrueNAS system in my HomeLab. I'm a visual learner and YOU can be paused. : 0 )
Appreciate your videos and education style. Keep it up.
Many thanks for the info you provide for free! So much appreciated 🙌🏻
You da man Lawrence! I had trouble with my SMB shares and stripping the ACL fixed the issue. Love your videos. I learn a lot from them.
Thank you! I tried to use Truenas instructions online but couldn't access thru my pc. Followed your instructions to a T and I was in. I understand there is alot more to this but for just me this tutorial was perfect.
This was extremely helpful in getting me up and running. Thank you so much.
Ha Ha, I watched this before setting up Truenas core for the first time. I was reading about this in the TNC manual, but it is more clear now, thanks.
Thanks, Like others have said I was stuck and didn't quite understand how to set permissions. Great video!
I really appreciate this video, man. This is the first tutorial I've found where you actually take the time to explain how this works instead of doing rapid fire like you're bored with the whole ordeal.
Thank you!! This fixed my issue I was having after upgrading.
Thank you. I was stuck on new permission and this helped alot
Thank you so much for this video, I between this and figuring out how to import a pool. I was able to restore my data after resetting my configuration.
This has helped me, thank you for sharing this.
ngl with this video I got my whole work folder back.
THANKS
Perfect. Explained so clearly. Saved me from uninstalling! Kudos!
This was great thanks! I was lost hadn't set it up since version 10.
Thank you very much for this video. It helped me a lot. Best regards from germany
Agreed...a fantastic video as usual!
Super helpful video. I learned so much. Thanks!
Thank you so much, I was having so much trouble with this very problem. I was able to fix this problem.
Awesome video. Been with Synology for a while but wanted learn TrueNAS purely for its flexibility.
Thanks so much for the many great explanations.
Super helpful. I managed to not lose my datasets as the main USB drive with the boot OS failed and I reloaded it on another.
It is recommended to not use USB drives for the OS because they can’t handle heavy workloads of OS’s. Your best bet is an SSD drive. I run dual SSD drives mirrored just to prevent an OS failure. I run enterprise grade SATA drives for my data.
Very good explained, thank you! Where do you save your docker volumes? I think it is ab bit complicate trying to save docker-volumes directly to smb-shares because some docker images want to change owner and permissions (for example guacamole). How do you handle this? Thanks 👍
This is really helpful. Thank you!
Thanks for another great video!
Thanks man great video
Thanks so much ! I was ready to pull my hair out and was a simple mistake i made. Can you show how to have a AD security group applied . My NAS is already joined and replicating changes to ACL domain list but I’m struggling to work out AD ACL for TrueNas.
Amazing how one video can help a lot!!!
Thank you so much. helped tons
Best explanation thank you
Helpful video. Lots of plugins are missing compared with Freeenas. How can i install them manually?
Hello, will you benchmark TrueNAS CORE? Some of us have 3x slower speed copying big files not in ZFS cache, compared to FreeNAS.
Great Video, Thanks
finally understood it, thank you
I struggled with this back in Freenas version 9 even...However; I figured out, you can actually use the Windows Permissions Dialog to add/change/remove user permissions. Use this format when asking to change group/user permissions.
ipaddress\username
When it prompts for the admin credentials use whoever has full control of that share in the same format as above.
Thank you Tom. I messed up my ACL and the strip option and your instructions got me back to accessing my files on my pc. Also TrueNAS Scale is slightly different with naming and directories vs core if it is possible or worth your time to update that would be great.
Great video. Thank you.
Any ideas about how to create AD User personal network drives with a set space of let's say 5 GB per user and proper permissions? Thanks for the awesome videos by the way
Thank you! your video was very helpfull!
Brilliant Brilliant video Thank you so much
Glad you enjoyed it
Wow, your video was the most in-depth of any that I found on how to set up TrueNas on an old PC. I believe I have set up TrueNas to work for my application. However, being that I am over my head on this stuff, I apparently wasn't aware that I also need separate software to use for storing my security camera's motion detected videos.
I am trying to use TrueNas on a spare PC to capture and store security camera video because the only storage is an SD card on the camera and I'm concerned about someone stealing the camera and thus the stored video. The security camera does offer a paid monthly subscription to have the videos stored in the cloud, but I don't trust this plus I'm not interested in having to pay to store the videos.
I was told in a chat that a very popular open-source TrueNAS plugin is Zoneminder. Do I need this to have the videos stored in my TrueNas shared folder? I thought that setting up this NAS would automatically send the files to the NAS folder.
I went to the Zoneminder site, but I had no idea how to use this, or whether I am supposed to install it on the old computer, my regular PC, or what? In addition, it wanted me to pick the operating system I will be using. I have no idea what Operating system the old PC is using since it is booted with a USB stick that has TrueNas on it.
As you can tell, my head is spinning.
Any help you can give this old senior citizen in setting this NAS up correctly is appreciated.
Another great video, Tom! The #TrueNAS Community thanks you for your tutorials!
My pleasure!
@FreeNAS and TrueNAS...how do you prevent a user from "seeing" a file/share when they do not have access/permissions to it. Example. User A only has access to Engineering, User B only has access to Production, User C has access to both. User A would ONLY see the Engineering folder and User B would ONLY see the Production folder but User C would see both.
Thanks for the video, perfext timing--I upgraded to Truenas 12 and added a new Volume and could not get the ACL permissions right, I know I could get it eventually, but your videos really help--
Great video
thanks for the help :)
Good video but could you do it for SCALE too? I can't get to understand how SCALE ACL works. Thank you for your great work.
Great video, a new sub!
Thanks for the sub!
When I use the IP address, everything seems fine. However, when I try and use \\[NAME OF SERVER], the permission get messed up and can only see files and folders that I have created and not the other user in my group. Any ideas?
Hi. How can i do add a freenas to zentyal's domain controller?
Great video. And thanks much. In terms of stripping ACLs, how do we strip acls from the whole pool? Still having issue with accessing data set from either Linux or Windows based system. I can see the shared datasets, however I am not able to go past the first folder without getting a second prompt to authenticate the user. But, even after inputting the right credentials, it says incorrect login/pass.
ACL's are assigned to datasets so that is where you remove or apply them.
If you want to share a folder over public IP so some someone else can access the folder somewhere else. How would you set that up?
Thanks man. Hope they make the process easy for noobs like me in the future =-))
Why not use root an wheel? What is the pratical difference between adding my user to wheel group or adding my user per acl?
Thank you for the video as it was helpful learning ACls and shares; however I am still having issue connecting with my windows PC. I have recreated the data sets and shares as well as stopped and restarted the SMB services but still no connection. ALl worked with version 11.2 but when I upgraded to 12.0 that is when everything broke. Any help you can provide would be so appreciated.
Can I suggest making sure the user account you are accessing from your PC is added in the ACL for the SMB? This tutorial focuses on ACL for datasets, not the SMB ACL
As soon as I use Filesystem ACLs, it screws up the permissions for my jail mounts.
Awesome content. Though I am having issues where I have 2 truenas builds. Server 1 smb is no longer present on local comp. And server 2 is still visible and accessible. They both have the same permissions. Help?
What is the main difference between linux style permission and acl permission manager? I was using old FreNAS 9.2.x.x version and used linux style permissions but now I'm confused witch style of permission manager to use with new TrueNAS Core.
Thanks Lawrence. I'm an upgrade, rather then re-install user, and this problem has been bugging me for a couple of weeks now. Couldn't remember what I did those 2yrs ago to set things up. Don't know why things suddenly changed. Perhaps part of the upgrade process?
The reason root/wheel doesn't work in FreeNAS 12 is because the wheel group doesn't have permissions for SMB authentication. If you show hidden groups and inspect the wheel group in the UI, you'll see that "Samba Authentication" is set to false. It doesn't seem possible to change this in the UI. I have verified that leaving the user root, but changing the group to a group that has "Samba Authentication: true" does work.
Is there anything similar on xigmanas? ACL settings on xigmanas don`t do anything at all. Tried different combinations of settings of ACL modes but nothing changes.
You have some great videos that have helped me. Does this work with a data set that was created before updating to 12.0? I updated last night and now I can't modify files from windows. I was using root because when I set freenas up originally, my windows user name was too long for freenas. Not long ago, I realized that I could setup a user with my windows user name. I already created that user but have not used it yet. I created a group under the same name for the ACLs and now I can't even access the folder.... Please Help me with my ignorance....
EDIT: Now Plex says that the drive is no longer mounted...... I managed to FUBAR it......
Tom thank you so much for your video. Everything is clear.
Recently with TrueNas 12 I have face a strange issue. For some user, excel and pdf file are not opening when stored on share. Checked permissions, but it seems to be correct. If same excel file stored on user local device, there is no problem. Could any one clarify on this ?
Not a problem I have encountered, try their forums
hey LTS Frends, i run an ESXI Lab-Server with Truenas as VM and want connect my (Win10 PC with 2.5 GB Tbase EternetRJ45), Peer to Peer (about 15meter) how to? maybee with an mikrotik s+rj10 & mellanox ConnectX-2 how you would do it? otherwise my esxi have dual GB NICs how to make a trunk in esxi with my hp smart switch, do i need a static ip? once i get it, but lost after reconfigure
I've encountered a strange (to me) behavior in Win10. I attempted to connect like you did, but I double clicked "TrueNAS" in the Network view on windows. But my defined user/pass would NOT be accepted. However when I went against the IP of the box, I was able to connect no problem. Not sure if windows is prefixing the username or something via the Network view. Any ideas what this could be?
After 2 years ... there is much difference with Truenas Scale for this configuration? thank you.
Can I delete the old dataset and make a new one without loosing the existing data? I just ran into this on mine.. been running for 7 years. Also I can only access mine with IP the DNS name no longer works is that by design?
I need to do this with AD groups & accounts, but any time I try to use something like Group = AD\Domain Admins I get "Error: [dacl] Item#0 is not valid per list types: [id] Not an integer". Other "solutions" I've found online don't resolve this. This is TrueNAS-13.0-U5.1 CORE. Anyone have any ideas? Tom, could you do a video on AD ACLs?
How do I set it so that my Datasets show underneath my pool in the Storage window ?
What should i do if when i try to open share through smb it dont ask my login/password
You already had a user created, what settings are required in the user?
Hi @Lawrence ,just one thing.
I'm using Truenas to backup data from a cloud web hosting with PLESK, and another folder to share personal files.
I want FULL permissions from local PC to all those folders.
Do you think I should use ACL for both folders?
Without ACL, from plesk everything is running great but I have some problems with permissions accessing those folders from windows.
You can use ACL as long as you set them up properly.
Hello how are you excellent video greetings from Argentina first of all, I wanted to ask how I can do the following
create two directory directory1 and this directory I gave the group: 1 user: 1 then create directory 2 and assign group: 2 and user: 1 to this but entering windows group 1 and user 1 sees all directory 2 and I was able to make modifications and others, how can I make it so that only user 1 and group 1 only see their directory, which would be 1, thanks.-
Great video, can make more video to show how to create samba folder to share to particular users group only
Any idea how I setup FTP in addition to SMB. I added my user to the dataset and added them to the ftp group. And did some testing. Not sure how this new TrueNAS setup should be configured.
I have not had to use FTP in over 10 years, not something I have tested as it's an old insecure protocol.
Thanks for this video Tom,. i am trying to wrap my head around why the dataset permission/owner is set to a regular user with a login? what if that user in the future don't need the access or left the company, wouldn't it make more sense to create a "storage" specific "system" user without a login and a group to own all the files dataset, and then set all users auxiliary group to that group?
You could do that, but this is targeted mostly for home users. Most businesses use Active Directory handle the permissions.
I'm having a problem with propagating newly created datasets... I've deleted old pools but I can still see it.
My issue is with a sub dataset, created an SMB share for it, and can't access it at all, only when I go through the parent dataset to the sub folder, but can't access the SMB share of the dataset directly. :(
Is this different in Scale? I followed the guide completely but when typing the IP of the server in the Windows Explorer and then my user credentials, it always says "wrong username or password" even though I checked (with the eye icon to show the password in plain text) repeatedly and even re-created the user on the TrueNAS.
I'm not sure if this is even working correctly in Scale at all since there are also some problems before getting to this point:
1. When setting the ACLs, TrueNAS will never save changes to owner and group from the ACL dialogue. Owner and group can ONLY be changed if you use the regular permissions (non-ACL) dialogue and then switch to ACLs. If you want to change owner and group again, you have to strip everything, set the new o/g in the regular permissions dialogue and then switch to ACL again.
2. When selecting the dataset in the SMB share dialogue, it does not show the blue batch that says "ACL" behind the name of the dataset.
Really weird behavior on my Scale 22.12.2
hey dear, i want to stop past like .exe or etc extension file on TrueNas SMB Share
dumb question, I noticed when you created tom & marcus you also created a group with their name then moved the users into the LTS group but left their initial user groups present. Are there any issues with making the LTS group first then when you create tom and marcus placing them in the LTS group during the creation? will this cause any issues?
It should still work.
Hi i have issue with connect TrueNAS to AD controller after restart. I merge TN and AD, set share, all was correctly. But then i restarted TrueNAS and after restart i lose connection with DC, SMB service can't start. In log i got error about "Winbind daemon is not available". Of course process is stopped and can't turn ON SMB service. I can't start service . Re-join to domain resolved my issue. Any suggest?
If I create a new dataset, can I have it include data that was already existing on the drive beforehand?
Each new dataset will not have data until you put data into it.
Do you need Windows Pro for this? Doesn't seem to work on Home edition, getting Permission Denied error when trying to connect. Group/User have ownership of share.
No , pro is not required
Well hope i can glean some help, can connect via Windows 10 and can access shares, Windows 11 can ping the IP but can not open the share.
What password are you using to login to the share in Windows Explorer? I'm constantly getting access denied.
Thanks for being knowledgeable, most are just slinging their mouth!! STRIP ACLS AND SET DAUGHTER TO GRANDSON GOOD OPTION
is it possible to have one main user to have all permisions to all pool, and some other users dont?
Yes
Setting up a regular ole' samba share on Linux is adding 5 lines to smb.conf
I like the simple explanation, expect you when I little too fast on login with marcus and copying some files. I tried to replicate what you did,, but I lost you. Thanks
thank you
I'm still a bit confused as to the default TrueNAS permissions vs "ACLs". Why would one use ACL vs the default permissions? Is it just to add more than one owner/group access?
ACL's offer more advanced options that you can get with the UNIX style permissions.
Is there any reason on earth ACL would screw up SSH public key authentication? I've been going absolutely nuts on this. Usually it's so easy, .ssh folder with 700 permission and authorized_keys with 600. But this danged thing will NOT skip the password prompt.
Do you have, or know of a good video for using AD integration? Or, would it work to have the shares setup so that a particular user (An Admin for example) has full control of the share / folders, and then use Windows to set the permissions? Would those permissions 'transfer' over to the TrueNAS interface? Does the TrueNAS interface read the permissions live from the file and folder permissions?
I don't have a video on it, but TrueNAS does support AD integration and they have documentation on their site.
@@LAWRENCESYSTEMS I managed to muddle my way through it, and have my AD fully integrated with my TrueNAS Core install. AD user Home directories auto create and map to the users, and I'm able to maintain emergency administrator access to the directories as needed. It's good for a small org / home lab, but I wouldn't want to do this at scale..... (no pun intended)