Tom, Your my "Go To" guy for when I set up a new TrueNAS system in my HomeLab. I'm a visual learner and YOU can be paused. : 0 ) Appreciate your videos and education style. Keep it up.
I really appreciate this video, man. This is the first tutorial I've found where you actually take the time to explain how this works instead of doing rapid fire like you're bored with the whole ordeal.
Thanks so much Tom, I realize the video is a bit older, but man you just make it all so easy. Thanks a bunch. Definitely my go to and recommended YT tech guru. Cheers my man.
Thank you! I tried to use Truenas instructions online but couldn't access thru my pc. Followed your instructions to a T and I was in. I understand there is alot more to this but for just me this tutorial was perfect.
@FreeNAS and TrueNAS...how do you prevent a user from "seeing" a file/share when they do not have access/permissions to it. Example. User A only has access to Engineering, User B only has access to Production, User C has access to both. User A would ONLY see the Engineering folder and User B would ONLY see the Production folder but User C would see both.
It is recommended to not use USB drives for the OS because they can’t handle heavy workloads of OS’s. Your best bet is an SSD drive. I run dual SSD drives mirrored just to prevent an OS failure. I run enterprise grade SATA drives for my data.
Thank you so much for this video, I between this and figuring out how to import a pool. I was able to restore my data after resetting my configuration.
Thanks for the video, perfext timing--I upgraded to Truenas 12 and added a new Volume and could not get the ACL permissions right, I know I could get it eventually, but your videos really help--
The reason root/wheel doesn't work in FreeNAS 12 is because the wheel group doesn't have permissions for SMB authentication. If you show hidden groups and inspect the wheel group in the UI, you'll see that "Samba Authentication" is set to false. It doesn't seem possible to change this in the UI. I have verified that leaving the user root, but changing the group to a group that has "Samba Authentication: true" does work.
I struggled with this back in Freenas version 9 even...However; I figured out, you can actually use the Windows Permissions Dialog to add/change/remove user permissions. Use this format when asking to change group/user permissions. ipaddress\username When it prompts for the admin credentials use whoever has full control of that share in the same format as above.
Thank you for the video as it was helpful learning ACls and shares; however I am still having issue connecting with my windows PC. I have recreated the data sets and shares as well as stopped and restarted the SMB services but still no connection. ALl worked with version 11.2 but when I upgraded to 12.0 that is when everything broke. Any help you can provide would be so appreciated.
Can I suggest making sure the user account you are accessing from your PC is added in the ACL for the SMB? This tutorial focuses on ACL for datasets, not the SMB ACL
Thank you Tom. I messed up my ACL and the strip option and your instructions got me back to accessing my files on my pc. Also TrueNAS Scale is slightly different with naming and directories vs core if it is possible or worth your time to update that would be great.
Wow, your video was the most in-depth of any that I found on how to set up TrueNas on an old PC. I believe I have set up TrueNas to work for my application. However, being that I am over my head on this stuff, I apparently wasn't aware that I also need separate software to use for storing my security camera's motion detected videos. I am trying to use TrueNas on a spare PC to capture and store security camera video because the only storage is an SD card on the camera and I'm concerned about someone stealing the camera and thus the stored video. The security camera does offer a paid monthly subscription to have the videos stored in the cloud, but I don't trust this plus I'm not interested in having to pay to store the videos. I was told in a chat that a very popular open-source TrueNAS plugin is Zoneminder. Do I need this to have the videos stored in my TrueNas shared folder? I thought that setting up this NAS would automatically send the files to the NAS folder. I went to the Zoneminder site, but I had no idea how to use this, or whether I am supposed to install it on the old computer, my regular PC, or what? In addition, it wanted me to pick the operating system I will be using. I have no idea what Operating system the old PC is using since it is booted with a USB stick that has TrueNas on it. As you can tell, my head is spinning. Any help you can give this old senior citizen in setting this NAS up correctly is appreciated.
Thanks for this video Tom,. i am trying to wrap my head around why the dataset permission/owner is set to a regular user with a login? what if that user in the future don't need the access or left the company, wouldn't it make more sense to create a "storage" specific "system" user without a login and a group to own all the files dataset, and then set all users auxiliary group to that group?
Very good explained, thank you! Where do you save your docker volumes? I think it is ab bit complicate trying to save docker-volumes directly to smb-shares because some docker images want to change owner and permissions (for example guacamole). How do you handle this? Thanks 👍
Thanks Lawrence. I'm an upgrade, rather then re-install user, and this problem has been bugging me for a couple of weeks now. Couldn't remember what I did those 2yrs ago to set things up. Don't know why things suddenly changed. Perhaps part of the upgrade process?
I like the simple explanation, expect you when I little too fast on login with marcus and copying some files. I tried to replicate what you did,, but I lost you. Thanks
Thanks so much ! I was ready to pull my hair out and was a simple mistake i made. Can you show how to have a AD security group applied . My NAS is already joined and replicating changes to ACL domain list but I’m struggling to work out AD ACL for TrueNas.
Any ideas about how to create AD User personal network drives with a set space of let's say 5 GB per user and proper permissions? Thanks for the awesome videos by the way
Thank you for making this video, unfortunately for me I had to restore everything and go back to freenas 11.x Truenas 12 has been a nightmare for me, speed / stability and weird bugs. I hope truenas gets updated soon as I'd love to use the new bhyve with pci passthrough (for my USB controller).
Great video and great explanation of how permissions work with TrueNAS. This helped a little with my understanding of permissions. How do you set the SMB Share to be recognized by the hostname and NOT by the IP address? Such as login to \\truenas and not \\192.168.x.x I cannot seem to figure that part out. I'd rather use the hostname instead of an IP address.
What is the main difference between linux style permission and acl permission manager? I was using old FreNAS 9.2.x.x version and used linux style permissions but now I'm confused witch style of permission manager to use with new TrueNAS Core.
Great video. And thanks much. In terms of stripping ACLs, how do we strip acls from the whole pool? Still having issue with accessing data set from either Linux or Windows based system. I can see the shared datasets, however I am not able to go past the first folder without getting a second prompt to authenticate the user. But, even after inputting the right credentials, it says incorrect login/pass.
In general, I find the SMB shared permissions in TrueNAS Core a massive mess and pain in the ass. I use TrueNAS for a few years and still, this topic is very painful as an home user, specially considering that some groups show in Share ACLs but not in normal ACLs and vise versa, total mess.
Tom thank you so much for your video. Everything is clear. Recently with TrueNas 12 I have face a strange issue. For some user, excel and pdf file are not opening when stored on share. Checked permissions, but it seems to be correct. If same excel file stored on user local device, there is no problem. Could any one clarify on this ?
Awesome content. Though I am having issues where I have 2 truenas builds. Server 1 smb is no longer present on local comp. And server 2 is still visible and accessible. They both have the same permissions. Help?
When you go to create a new dataset and click storage I don't have the option to add a dataset. I have two pools already created but I don't have the add dataset option
For Truenas SCALE, this won't work. Something broke recently after the release on Truenas SCALE. SMB just isn't functional. All permissions set seem to be fully ignored, even on newly create datasets and shares. And this isn't just the issue from guest access being removed from a recent Windows Update, nor credential issues within Windows. The only workaround I've found is to use chmod from a shell to give full access to all, but that is hardly ideal.
Hello how are you excellent video greetings from Argentina first of all, I wanted to ask how I can do the following create two directory directory1 and this directory I gave the group: 1 user: 1 then create directory 2 and assign group: 2 and user: 1 to this but entering windows group 1 and user 1 sees all directory 2 and I was able to make modifications and others, how can I make it so that only user 1 and group 1 only see their directory, which would be 1, thanks.-
My issue is with a sub dataset, created an SMB share for it, and can't access it at all, only when I go through the parent dataset to the sub folder, but can't access the SMB share of the dataset directly. :(
Do you have, or know of a good video for using AD integration? Or, would it work to have the shares setup so that a particular user (An Admin for example) has full control of the share / folders, and then use Windows to set the permissions? Would those permissions 'transfer' over to the TrueNAS interface? Does the TrueNAS interface read the permissions live from the file and folder permissions?
@@LAWRENCESYSTEMS I managed to muddle my way through it, and have my AD fully integrated with my TrueNAS Core install. AD user Home directories auto create and map to the users, and I'm able to maintain emergency administrator access to the directories as needed. It's good for a small org / home lab, but I wouldn't want to do this at scale..... (no pun intended)
I created new user and group and followed your instruction video step by step still window does not allow me to access using the map network drive. I can see the folder but not access when prompt different credentials. Drive me crazy to able to access the files from window. How does window knows what user you are when open network drive at TrueNAS? I check the getfacl and the owner permission is correct but when I mapped network drive, I use the same owner credential I get error.
depending on your setup, you may need to add the host name before the username in the password dialog on windows, eg "TRUENASHOST\username" W10, esp with azure/ad can be troublesome with network shares lol
@@dilbertwave646 Tried that not working. Now, the Windows error is "The network folder specified is currently using a different user name and password. To connect using different user name and password, first disconnect any existing mapping.." I did disconnect on the windows explorer that I can see. Still same issue.
I managed to delete all unsuccessful map drive using cmd net use. Now back to Window cannot access \\192.168.1.20\youtubefolder\.. You do not have permission to access...
@@mrteausaable Do like he show's in the vid on truenas, create a user/pass and a group, set the ACL to restricted, add your user and group to the ACL with r/w permissions. On your windows box, connect to the share. When it prompts for credentials, click other credentials, in the user box put "YourNASHostname\UserCreatedonNAS" and then put in the password. Also make sure network discovery and file/print sharing are turned on for the network in windows
@@dilbertwave646 No luck sir. I still get window cannot access \\truenas\testfolder. You do not have permission to access.." message. I tried different pc on the network same error. I can mapped to different network pc just fine but not TrueNAS. I use FreeNAS and it works fine.
You have some great videos that have helped me. Does this work with a data set that was created before updating to 12.0? I updated last night and now I can't modify files from windows. I was using root because when I set freenas up originally, my windows user name was too long for freenas. Not long ago, I realized that I could setup a user with my windows user name. I already created that user but have not used it yet. I created a group under the same name for the ACLs and now I can't even access the folder.... Please Help me with my ignorance.... EDIT: Now Plex says that the drive is no longer mounted...... I managed to FUBAR it......
I reinstall TrueNAS couple times. Follow your examples with tom username and group. I am unable to access via windows (8:40 min of this video), I received Windows cannot access \\.... You do not have permission to access.... Any idea what I did wrong? Test on second PC the same windows Network Error.
@@albertcamposmerola9777 I already did. Follow this thread www.truenas.com/community/threads/new-truenas-install-create-1-new-user-and-smb-share-but-unable-to-access-from-windows-10.88953/. Hope it helps.
@@LAWRENCESYSTEMS could it manage password for freebsd users? that's what i'm looking for... I need to make possible for the users of my truenas installation to change their password if they need it whenever they want and in a manner that isn't too tricky
I'm still a bit confused as to the default TrueNAS permissions vs "ACLs". Why would one use ACL vs the default permissions? Is it just to add more than one owner/group access?
Any idea how I setup FTP in addition to SMB. I added my user to the dataset and added them to the ftp group. And did some testing. Not sure how this new TrueNAS setup should be configured.
I've encountered a strange (to me) behavior in Win10. I attempted to connect like you did, but I double clicked "TrueNAS" in the Network view on windows. But my defined user/pass would NOT be accepted. However when I went against the IP of the box, I was able to connect no problem. Not sure if windows is prefixing the username or something via the Network view. Any ideas what this could be?
Is there any reason on earth ACL would screw up SSH public key authentication? I've been going absolutely nuts on this. Usually it's so easy, .ssh folder with 700 permission and authorized_keys with 600. But this danged thing will NOT skip the password prompt.
Is this different in Scale? I followed the guide completely but when typing the IP of the server in the Windows Explorer and then my user credentials, it always says "wrong username or password" even though I checked (with the eye icon to show the password in plain text) repeatedly and even re-created the user on the TrueNAS. I'm not sure if this is even working correctly in Scale at all since there are also some problems before getting to this point: 1. When setting the ACLs, TrueNAS will never save changes to owner and group from the ACL dialogue. Owner and group can ONLY be changed if you use the regular permissions (non-ACL) dialogue and then switch to ACLs. If you want to change owner and group again, you have to strip everything, set the new o/g in the regular permissions dialogue and then switch to ACL again. 2. When selecting the dataset in the SMB share dialogue, it does not show the blue batch that says "ACL" behind the name of the dataset. Really weird behavior on my Scale 22.12.2
It doesnt work for me on scale. Its such a frustrating piece of software... "This may be fixed by granting the aforementioned user execute permissions on the path" is from hell. I did NOTHING and from today on basically I cant access my folder anymore - how can this be?
dumb question, I noticed when you created tom & marcus you also created a group with their name then moved the users into the LTS group but left their initial user groups present. Are there any issues with making the LTS group first then when you create tom and marcus placing them in the LTS group during the creation? will this cause any issues?
I need to do this with AD groups & accounts, but any time I try to use something like Group = AD\Domain Admins I get "Error: [dacl] Item#0 is not valid per list types: [id] Not an integer". Other "solutions" I've found online don't resolve this. This is TrueNAS-13.0-U5.1 CORE. Anyone have any ideas? Tom, could you do a video on AD ACLs?
Hi @Lawrence ,just one thing. I'm using Truenas to backup data from a cloud web hosting with PLESK, and another folder to share personal files. I want FULL permissions from local PC to all those folders. Do you think I should use ACL for both folders? Without ACL, from plesk everything is running great but I have some problems with permissions accessing those folders from windows.
I have followed the video tutorial you made regarding Truenas Core, and I successfully installed and ran the server in my office. I say thank you to you. Then the problem for me is the following: How to block windows users from uploading files with the specified extension in the folder we share in truenas core? My case is that a client puts movie, music files in a shared folder on my file server and I don't want this, and I also want to block the files I want right. And how also only the admin group can only delete files, either from windows or server side. Then I had several .exe files, when I put them on the server (truenas core), but they couldn't be executed on the Windows user, I thought it was about permissions, I looked around and couldn't find them. I hope you can help me. Warm regards
@@LAWRENCESYSTEMS Thank you for the response, I really appreciate it. If I may ask again, what about deleting files. The client in Windows deletes the files on the truenas server, can they be backed up, so they can be restored at any time, or can this be used with snapshots like the tutorial in your other video. or how can only admins delete files?
Is there anything similar on xigmanas? ACL settings on xigmanas don`t do anything at all. Tried different combinations of settings of ACL modes but nothing changes.
even now, 3 years later, this video helped me fix the permissions in truenas. Appreciate everything you do.
same
Same here.
same here as of today
Tom, Your my "Go To" guy for when I set up a new TrueNAS system in my HomeLab. I'm a visual learner and YOU can be paused. : 0 )
Appreciate your videos and education style. Keep it up.
I really appreciate this video, man. This is the first tutorial I've found where you actually take the time to explain how this works instead of doing rapid fire like you're bored with the whole ordeal.
Thanks so much Tom, I realize the video is a bit older, but man you just make it all so easy. Thanks a bunch. Definitely my go to and recommended YT tech guru. Cheers my man.
man appreciate this guy, all the way from my first true nas 10.1 till 13.0 he been there every step
Thank you! I tried to use Truenas instructions online but couldn't access thru my pc. Followed your instructions to a T and I was in. I understand there is alot more to this but for just me this tutorial was perfect.
I just upgraded and changed out some hardware. I could not get back to the previous network permissions. This video saved my evening! Thank you!
Tysm. Was having issues accessing the folder within the file explorer but after following your tutorial I managed to gain access to it.
Ha Ha, I watched this before setting up Truenas core for the first time. I was reading about this in the TNC manual, but it is more clear now, thanks.
Thanks for the clear explanation, I'm new to truenas and I never worked with ACL so this video was very helpful.
You da man Lawrence! I had trouble with my SMB shares and stripping the ACL fixed the issue. Love your videos. I learn a lot from them.
Many thanks for the info you provide for free! So much appreciated 🙌🏻
ngl with this video I got my whole work folder back.
THANKS
Awesome video. Been with Synology for a while but wanted learn TrueNAS purely for its flexibility.
Another great video, Tom! The #TrueNAS Community thanks you for your tutorials!
My pleasure!
@FreeNAS and TrueNAS...how do you prevent a user from "seeing" a file/share when they do not have access/permissions to it. Example. User A only has access to Engineering, User B only has access to Production, User C has access to both. User A would ONLY see the Engineering folder and User B would ONLY see the Production folder but User C would see both.
Thank you very much for this video. It helped me a lot. Best regards from germany
Thanks, Like others have said I was stuck and didn't quite understand how to set permissions. Great video!
Thank you!! This fixed my issue I was having after upgrading.
This was extremely helpful in getting me up and running. Thank you so much.
Perfect. Explained so clearly. Saved me from uninstalling! Kudos!
This has helped me, thank you for sharing this.
Super helpful. I managed to not lose my datasets as the main USB drive with the boot OS failed and I reloaded it on another.
It is recommended to not use USB drives for the OS because they can’t handle heavy workloads of OS’s. Your best bet is an SSD drive. I run dual SSD drives mirrored just to prevent an OS failure. I run enterprise grade SATA drives for my data.
This was great thanks! I was lost hadn't set it up since version 10.
Brilliant video, very clear and well explained. Thank you!
Thank you so much for this video, I between this and figuring out how to import a pool. I was able to restore my data after resetting my configuration.
Thank you. I was stuck on new permission and this helped alot
Thank you so much, I was having so much trouble with this very problem. I was able to fix this problem.
Thanks for the video, perfext timing--I upgraded to Truenas 12 and added a new Volume and could not get the ACL permissions right, I know I could get it eventually, but your videos really help--
Amazing how one video can help a lot!!!
Life saver, appreciated the video.
This is really helpful. Thank you!
Thanks man great video
Agreed...a fantastic video as usual!
The reason root/wheel doesn't work in FreeNAS 12 is because the wheel group doesn't have permissions for SMB authentication. If you show hidden groups and inspect the wheel group in the UI, you'll see that "Samba Authentication" is set to false. It doesn't seem possible to change this in the UI. I have verified that leaving the user root, but changing the group to a group that has "Samba Authentication: true" does work.
Super helpful video. I learned so much. Thanks!
finally understood it, thank you
Thanks so much for the many great explanations.
This video helped me a bunch
Brilliant Brilliant video Thank you so much
Glad you enjoyed it
Good video but could you do it for SCALE too? I can't get to understand how SCALE ACL works. Thank you for your great work.
I struggled with this back in Freenas version 9 even...However; I figured out, you can actually use the Windows Permissions Dialog to add/change/remove user permissions. Use this format when asking to change group/user permissions.
ipaddress\username
When it prompts for the admin credentials use whoever has full control of that share in the same format as above.
Thanks man. Hope they make the process easy for noobs like me in the future =-))
Thank you for the video as it was helpful learning ACls and shares; however I am still having issue connecting with my windows PC. I have recreated the data sets and shares as well as stopped and restarted the SMB services but still no connection. ALl worked with version 11.2 but when I upgraded to 12.0 that is when everything broke. Any help you can provide would be so appreciated.
Can I suggest making sure the user account you are accessing from your PC is added in the ACL for the SMB? This tutorial focuses on ACL for datasets, not the SMB ACL
Thank you so much. helped tons
Best explanation thank you
Thank you Tom. I messed up my ACL and the strip option and your instructions got me back to accessing my files on my pc. Also TrueNAS Scale is slightly different with naming and directories vs core if it is possible or worth your time to update that would be great.
Wow, your video was the most in-depth of any that I found on how to set up TrueNas on an old PC. I believe I have set up TrueNas to work for my application. However, being that I am over my head on this stuff, I apparently wasn't aware that I also need separate software to use for storing my security camera's motion detected videos.
I am trying to use TrueNas on a spare PC to capture and store security camera video because the only storage is an SD card on the camera and I'm concerned about someone stealing the camera and thus the stored video. The security camera does offer a paid monthly subscription to have the videos stored in the cloud, but I don't trust this plus I'm not interested in having to pay to store the videos.
I was told in a chat that a very popular open-source TrueNAS plugin is Zoneminder. Do I need this to have the videos stored in my TrueNas shared folder? I thought that setting up this NAS would automatically send the files to the NAS folder.
I went to the Zoneminder site, but I had no idea how to use this, or whether I am supposed to install it on the old computer, my regular PC, or what? In addition, it wanted me to pick the operating system I will be using. I have no idea what Operating system the old PC is using since it is booted with a USB stick that has TrueNas on it.
As you can tell, my head is spinning.
Any help you can give this old senior citizen in setting this NAS up correctly is appreciated.
Thanks for another great video!
Thanks for this video Tom,. i am trying to wrap my head around why the dataset permission/owner is set to a regular user with a login? what if that user in the future don't need the access or left the company, wouldn't it make more sense to create a "storage" specific "system" user without a login and a group to own all the files dataset, and then set all users auxiliary group to that group?
You could do that, but this is targeted mostly for home users. Most businesses use Active Directory handle the permissions.
Very good explained, thank you! Where do you save your docker volumes? I think it is ab bit complicate trying to save docker-volumes directly to smb-shares because some docker images want to change owner and permissions (for example guacamole). How do you handle this? Thanks 👍
Great video. Thank you.
Thanks Lawrence. I'm an upgrade, rather then re-install user, and this problem has been bugging me for a couple of weeks now. Couldn't remember what I did those 2yrs ago to set things up. Don't know why things suddenly changed. Perhaps part of the upgrade process?
I like the simple explanation, expect you when I little too fast on login with marcus and copying some files. I tried to replicate what you did,, but I lost you. Thanks
Thanks so much ! I was ready to pull my hair out and was a simple mistake i made. Can you show how to have a AD security group applied . My NAS is already joined and replicating changes to ACL domain list but I’m struggling to work out AD ACL for TrueNas.
That is useful. thank you
Any ideas about how to create AD User personal network drives with a set space of let's say 5 GB per user and proper permissions? Thanks for the awesome videos by the way
Thanks for being knowledgeable, most are just slinging their mouth!! STRIP ACLS AND SET DAUGHTER TO GRANDSON GOOD OPTION
Great video, a new sub!
Thanks for the sub!
thanks for the help :)
Great video
Helpful video. Lots of plugins are missing compared with Freeenas. How can i install them manually?
Thank you for making this video, unfortunately for me I had to restore everything and go back to freenas 11.x Truenas 12 has been a nightmare for me, speed / stability and weird bugs. I hope truenas gets updated soon as I'd love to use the new bhyve with pci passthrough (for my USB controller).
Sorry to read about that. If it does PCI passthru does that mean hardware transcoding might be possible?
@@bikerchrisukk I think it is!
@@JoaoSilva-gs5jb Sweet, thanks!
theoretically, yes.
@@peterh7575 Thank you Peter 👍
Thank you! your video was very helpfull!
Great video and great explanation of how permissions work with TrueNAS. This helped a little with my understanding of permissions.
How do you set the SMB Share to be recognized by the hostname and NOT by the IP address? Such as login to \\truenas and not \\192.168.x.x I cannot seem to figure that part out. I'd rather use the hostname instead of an IP address.
You need an entry in your DNS for that to work.
@@LAWRENCESYSTEMS can you be more specific? I was able to do this with Debian + Samba, and Ubuntu Server + Samba, but apparently not here.
Put an entry in your DNS server for the name
Great video, can make more video to show how to create samba folder to share to particular users group only
What is the main difference between linux style permission and acl permission manager? I was using old FreNAS 9.2.x.x version and used linux style permissions but now I'm confused witch style of permission manager to use with new TrueNAS Core.
Great video. And thanks much. In terms of stripping ACLs, how do we strip acls from the whole pool? Still having issue with accessing data set from either Linux or Windows based system. I can see the shared datasets, however I am not able to go past the first folder without getting a second prompt to authenticate the user. But, even after inputting the right credentials, it says incorrect login/pass.
ACL's are assigned to datasets so that is where you remove or apply them.
In general, I find the SMB shared permissions in TrueNAS Core a massive mess and pain in the ass.
I use TrueNAS for a few years and still, this topic is very painful as an home user, specially considering that some groups show in Share ACLs but not in normal ACLs and vise versa, total mess.
Tom thank you so much for your video. Everything is clear.
Recently with TrueNas 12 I have face a strange issue. For some user, excel and pdf file are not opening when stored on share. Checked permissions, but it seems to be correct. If same excel file stored on user local device, there is no problem. Could any one clarify on this ?
Not a problem I have encountered, try their forums
Awesome content. Though I am having issues where I have 2 truenas builds. Server 1 smb is no longer present on local comp. And server 2 is still visible and accessible. They both have the same permissions. Help?
When you go to create a new dataset and click storage I don't have the option to add a dataset. I have two pools already created but I don't have the add dataset option
For Truenas SCALE, this won't work. Something broke recently after the release on Truenas SCALE. SMB just isn't functional. All permissions set seem to be fully ignored, even on newly create datasets and shares. And this isn't just the issue from guest access being removed from a recent Windows Update, nor credential issues within Windows. The only workaround I've found is to use chmod from a shell to give full access to all, but that is hardly ideal.
Hello how are you excellent video greetings from Argentina first of all, I wanted to ask how I can do the following
create two directory directory1 and this directory I gave the group: 1 user: 1 then create directory 2 and assign group: 2 and user: 1 to this but entering windows group 1 and user 1 sees all directory 2 and I was able to make modifications and others, how can I make it so that only user 1 and group 1 only see their directory, which would be 1, thanks.-
My issue is with a sub dataset, created an SMB share for it, and can't access it at all, only when I go through the parent dataset to the sub folder, but can't access the SMB share of the dataset directly. :(
Do you have, or know of a good video for using AD integration? Or, would it work to have the shares setup so that a particular user (An Admin for example) has full control of the share / folders, and then use Windows to set the permissions? Would those permissions 'transfer' over to the TrueNAS interface? Does the TrueNAS interface read the permissions live from the file and folder permissions?
I don't have a video on it, but TrueNAS does support AD integration and they have documentation on their site.
@@LAWRENCESYSTEMS I managed to muddle my way through it, and have my AD fully integrated with my TrueNAS Core install. AD user Home directories auto create and map to the users, and I'm able to maintain emergency administrator access to the directories as needed. It's good for a small org / home lab, but I wouldn't want to do this at scale..... (no pun intended)
I created new user and group and followed your instruction video step by step still window does not allow me to access using the map network drive. I can see the folder but not access when prompt different credentials. Drive me crazy to able to access the files from window. How does window knows what user you are when open network drive at TrueNAS? I check the getfacl and the owner permission is correct but when I mapped network drive, I use the same owner credential I get error.
depending on your setup, you may need to add the host name before the username in the password dialog on windows, eg "TRUENASHOST\username" W10, esp with azure/ad can be troublesome with network shares lol
@@dilbertwave646 Tried that not working. Now, the Windows error is "The network folder specified is currently using a different user name and password. To connect using different user name and password, first disconnect any existing mapping.." I did disconnect on the windows explorer that I can see. Still same issue.
I managed to delete all unsuccessful map drive using cmd net use. Now back to Window cannot access \\192.168.1.20\youtubefolder\.. You do not have permission to access...
@@mrteausaable Do like he show's in the vid on truenas, create a user/pass and a group, set the ACL to restricted, add your user and group to the ACL with r/w permissions. On your windows box, connect to the share. When it prompts for credentials, click other credentials, in the user box put "YourNASHostname\UserCreatedonNAS" and then put in the password. Also make sure network discovery and file/print sharing are turned on for the network in windows
@@dilbertwave646 No luck sir. I still get window cannot access \\truenas\testfolder. You do not have permission to access.." message. I tried different pc on the network same error. I can mapped to different network pc just fine but not TrueNAS. I use FreeNAS and it works fine.
Gracias!
You have some great videos that have helped me. Does this work with a data set that was created before updating to 12.0? I updated last night and now I can't modify files from windows. I was using root because when I set freenas up originally, my windows user name was too long for freenas. Not long ago, I realized that I could setup a user with my windows user name. I already created that user but have not used it yet. I created a group under the same name for the ACLs and now I can't even access the folder.... Please Help me with my ignorance....
EDIT: Now Plex says that the drive is no longer mounted...... I managed to FUBAR it......
Saved my ass! Im trippin over here wondering why it wont connect... dummy, you gotta create a share! 6:50 HA HA, FORGOT! +rep
Why not use root an wheel? What is the pratical difference between adding my user to wheel group or adding my user per acl?
I reinstall TrueNAS couple times. Follow your examples with tom username and group. I am unable to access via windows (8:40 min of this video), I received Windows cannot access \\.... You do not have permission to access.... Any idea what I did wrong? Test on second PC the same windows Network Error.
I got TrueNAS forum help and get it fixed. The problem is I imported pool from FreeNAS pool. FreeNAS pool does not have permission for everyone..
@@mrteausaable Could you post a link to the forum for solution? I'm having the same issue
@@albertcamposmerola9777 I already did. Follow this thread www.truenas.com/community/threads/new-truenas-install-create-1-new-user-and-smb-share-but-unable-to-access-from-windows-10.88953/. Hope it helps.
@@mrteausaable Whoever you are, thank you! You saved me from pulling an all nighter hahaha
Hello, will you benchmark TrueNAS CORE? Some of us have 3x slower speed copying big files not in ZFS cache, compared to FreeNAS.
is there any chance that Lawrence would make a video to show us how to make users manage their own password for a home environment?
Use Bitwarden
@@LAWRENCESYSTEMS could it manage password for freebsd users? that's what i'm looking for... I need to make possible for the users of my truenas installation to change their password if they need it whenever they want and in a manner that isn't too tricky
@@sandrybridge3227 No, the most common way this is handing is through system such as Active Directory
@@LAWRENCESYSTEMS got it, thank you
I'm still a bit confused as to the default TrueNAS permissions vs "ACLs". Why would one use ACL vs the default permissions? Is it just to add more than one owner/group access?
ACL's offer more advanced options that you can get with the UNIX style permissions.
If you want to share a folder over public IP so some someone else can access the folder somewhere else. How would you set that up?
thank you
Any idea how I setup FTP in addition to SMB. I added my user to the dataset and added them to the ftp group. And did some testing. Not sure how this new TrueNAS setup should be configured.
I have not had to use FTP in over 10 years, not something I have tested as it's an old insecure protocol.
To be honest, everyone knew what kind of stuff will be uploaded to the "xxx" folder created at 15:20 :D
I've encountered a strange (to me) behavior in Win10. I attempted to connect like you did, but I double clicked "TrueNAS" in the Network view on windows. But my defined user/pass would NOT be accepted. However when I went against the IP of the box, I was able to connect no problem. Not sure if windows is prefixing the username or something via the Network view. Any ideas what this could be?
Is there any reason on earth ACL would screw up SSH public key authentication? I've been going absolutely nuts on this. Usually it's so easy, .ssh folder with 700 permission and authorized_keys with 600. But this danged thing will NOT skip the password prompt.
Is this different in Scale? I followed the guide completely but when typing the IP of the server in the Windows Explorer and then my user credentials, it always says "wrong username or password" even though I checked (with the eye icon to show the password in plain text) repeatedly and even re-created the user on the TrueNAS.
I'm not sure if this is even working correctly in Scale at all since there are also some problems before getting to this point:
1. When setting the ACLs, TrueNAS will never save changes to owner and group from the ACL dialogue. Owner and group can ONLY be changed if you use the regular permissions (non-ACL) dialogue and then switch to ACLs. If you want to change owner and group again, you have to strip everything, set the new o/g in the regular permissions dialogue and then switch to ACL again.
2. When selecting the dataset in the SMB share dialogue, it does not show the blue batch that says "ACL" behind the name of the dataset.
Really weird behavior on my Scale 22.12.2
After 2 years ... there is much difference with Truenas Scale for this configuration? thank you.
It doesnt work for me on scale. Its such a frustrating piece of software... "This may be fixed by granting the aforementioned user execute permissions on the path" is from hell. I did NOTHING and from today on basically I cant access my folder anymore - how can this be?
I should have watch this 16mins video first before I went in the rabbit hole
dumb question, I noticed when you created tom & marcus you also created a group with their name then moved the users into the LTS group but left their initial user groups present. Are there any issues with making the LTS group first then when you create tom and marcus placing them in the LTS group during the creation? will this cause any issues?
It should still work.
I need to do this with AD groups & accounts, but any time I try to use something like Group = AD\Domain Admins I get "Error: [dacl] Item#0 is not valid per list types: [id] Not an integer". Other "solutions" I've found online don't resolve this. This is TrueNAS-13.0-U5.1 CORE. Anyone have any ideas? Tom, could you do a video on AD ACLs?
You already had a user created, what settings are required in the user?
Hi @Lawrence ,just one thing.
I'm using Truenas to backup data from a cloud web hosting with PLESK, and another folder to share personal files.
I want FULL permissions from local PC to all those folders.
Do you think I should use ACL for both folders?
Without ACL, from plesk everything is running great but I have some problems with permissions accessing those folders from windows.
You can use ACL as long as you set them up properly.
I have followed the video tutorial you made regarding Truenas Core,
and I successfully installed and ran the server in my office.
I say thank you to you.
Then the problem for me is the following:
How to block windows users from uploading files with the specified extension in the folder we share in truenas core?
My case is that a client puts movie, music files in a shared folder on my file server and I don't want this, and I also want to block the files I want right.
And how also only the admin group can only delete files, either from windows or server side.
Then I had several .exe files, when I put them on the server (truenas core), but they couldn't be executed on the Windows user, I thought it was about permissions, I looked around and couldn't find them.
I hope you can help me.
Warm regards
That is not a feature that Samba on TrueNAS supports.
@@LAWRENCESYSTEMS Thank you for the response, I really appreciate it.
If I may ask again, what about deleting files.
The client in Windows deletes the files on the truenas server, can they be backed up, so they can be restored at any time, or can this be used with snapshots like the tutorial in your other video.
or how can only admins delete files?
Is there anything similar on xigmanas? ACL settings on xigmanas don`t do anything at all. Tried different combinations of settings of ACL modes but nothing changes.