TrueNAS Core 12 User and Group ACL Permissions and SMB Sharing
VloĆŸit
- Äas pĆidĂĄn 19. 06. 2024
- Connecting With Us
---------------------------------------------------
+ Hire Us For A Project: lawrencesystems.com/hire-us/
+ Tom Twitter đŠ / tomlawrencetech
+ Our Web Site www.lawrencesystems.com/
+ Our Forums forums.lawrencesystems.com/
+ Instagram / lawrencesystems
+ Facebook / lawrencesystems
+ GitHub github.com/lawrencesystems/
+ Discord / discord
Lawrence Systems Shirts and Swag
---------------------------------------------------
âșđ lawrence.video/swag
AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
đ www.amazon.com/shop/lawrences...
UniFi Affiliate Link
đ store.ui.com?a_aid=LTS
All Of Our Affiliates that help us out and can get you discounts!
đ lawrencesystems.com/partners-...
Gear we use on Kit
đ kit.co/lawrencesystems
Use OfferCode LTSERVICES to get 5% off your order at
đ lawrence.video/techsupplydirect
Digital Ocean Offer Code
đ m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
đ hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
đ www.privateinternetaccess.com...
Patreon
đ° / lawrencesystems
â±ïž Timestamps â±ïž
0:00 TrueNAS Core 12.0 Permissions
2:08 Creating a new dataset for SMB
2:36 Creating and Setting ACL Permissions
5:24 TrueNAS Strip ACL Permissions
6:24 TrueNAS Create Windows SMB Share
8:29 Testing TrueNAS Shares in Windows 10
9:30 Creating User and Assigning Groups for Shares
13:03 Checking ACL from command line using getfacl
14:11 Configuring multiple Advance ACL items
#TrueNAS #NAS - VÄda a technologie
even now, 3 years later, this video helped me fix the permissions in truenas. Appreciate everything you do.
same
Thanks so much Tom, I realize the video is a bit older, but man you just make it all so easy. Thanks a bunch. Definitely my go to and recommended YT tech guru. Cheers my man.
man appreciate this guy, all the way from my first true nas 10.1 till 13.0 he been there every step
Thanks for the clear explanation, I'm new to truenas and I never worked with ACL so this video was very helpful.
Tom, Your my "Go To" guy for when I set up a new TrueNAS system in my HomeLab. I'm a visual learner and YOU can be paused. : 0 )
Appreciate your videos and education style. Keep it up.
I just upgraded and changed out some hardware. I could not get back to the previous network permissions. This video saved my evening! Thank you!
Tysm. Was having issues accessing the folder within the file explorer but after following your tutorial I managed to gain access to it.
Brilliant video, very clear and well explained. Thank you!
This was extremely helpful in getting me up and running. Thank you so much.
I really appreciate this video, man. This is the first tutorial I've found where you actually take the time to explain how this works instead of doing rapid fire like you're bored with the whole ordeal.
Thank you! I tried to use Truenas instructions online but couldn't access thru my pc. Followed your instructions to a T and I was in. I understand there is alot more to this but for just me this tutorial was perfect.
Many thanks for the info you provide for free! So much appreciated đđ»
Thanks, Like others have said I was stuck and didn't quite understand how to set permissions. Great video!
You da man Lawrence! I had trouble with my SMB shares and stripping the ACL fixed the issue. Love your videos. I learn a lot from them.
Ha Ha, I watched this before setting up Truenas core for the first time. I was reading about this in the TNC manual, but it is more clear now, thanks.
This was great thanks! I was lost hadn't set it up since version 10.
Thank you. I was stuck on new permission and this helped alot
Thank you!! This fixed my issue I was having after upgrading.
ngl with this video I got my whole work folder back.
THANKS
Thank you so much for this video, I between this and figuring out how to import a pool. I was able to restore my data after resetting my configuration.
Thank you so much, I was having so much trouble with this very problem. I was able to fix this problem.
Awesome video. Been with Synology for a while but wanted learn TrueNAS purely for its flexibility.
This has helped me, thank you for sharing this.
Perfect. Explained so clearly. Saved me from uninstalling! Kudos!
Super helpful video. I learned so much. Thanks!
Thank you very much for this video. It helped me a lot. Best regards from germany
Agreed...a fantastic video as usual!
Thanks so much for the many great explanations.
This is really helpful. Thank you!
Amazing how one video can help a lot!!!
Thanks for another great video!
Thank you Tom. I messed up my ACL and the strip option and your instructions got me back to accessing my files on my pc. Also TrueNAS Scale is slightly different with naming and directories vs core if it is possible or worth your time to update that would be great.
Thanks man great video
Thank you so much. helped tons
Super helpful. I managed to not lose my datasets as the main USB drive with the boot OS failed and I reloaded it on another.
It is recommended to not use USB drives for the OS because they canât handle heavy workloads of OSâs. Your best bet is an SSD drive. I run dual SSD drives mirrored just to prevent an OS failure. I run enterprise grade SATA drives for my data.
finally understood it, thank you
Best explanation thank you
Another great video, Tom! The #TrueNAS Community thanks you for your tutorials!
My pleasure!
@FreeNAS and TrueNAS...how do you prevent a user from "seeing" a file/share when they do not have access/permissions to it. Example. User A only has access to Engineering, User B only has access to Production, User C has access to both. User A would ONLY see the Engineering folder and User B would ONLY see the Production folder but User C would see both.
Very good explained, thank you! Where do you save your docker volumes? I think it is ab bit complicate trying to save docker-volumes directly to smb-shares because some docker images want to change owner and permissions (for example guacamole). How do you handle this? Thanks đ
Great video. Thank you.
Wow, your video was the most in-depth of any that I found on how to set up TrueNas on an old PC. I believe I have set up TrueNas to work for my application. However, being that I am over my head on this stuff, I apparently wasn't aware that I also need separate software to use for storing my security camera's motion detected videos.
I am trying to use TrueNas on a spare PC to capture and store security camera video because the only storage is an SD card on the camera and I'm concerned about someone stealing the camera and thus the stored video. The security camera does offer a paid monthly subscription to have the videos stored in the cloud, but I don't trust this plus I'm not interested in having to pay to store the videos.
I was told in a chat that a very popular open-source TrueNAS plugin is Zoneminder. Do I need this to have the videos stored in my TrueNas shared folder? I thought that setting up this NAS would automatically send the files to the NAS folder.
I went to the Zoneminder site, but I had no idea how to use this, or whether I am supposed to install it on the old computer, my regular PC, or what? In addition, it wanted me to pick the operating system I will be using. I have no idea what Operating system the old PC is using since it is booted with a USB stick that has TrueNas on it.
As you can tell, my head is spinning.
Any help you can give this old senior citizen in setting this NAS up correctly is appreciated.
Great Video, Thanks
Thanks man. Hope they make the process easy for noobs like me in the future =-))
Thank you! your video was very helpfull!
I struggled with this back in Freenas version 9 even...However; I figured out, you can actually use the Windows Permissions Dialog to add/change/remove user permissions. Use this format when asking to change group/user permissions.
ipaddress\username
When it prompts for the admin credentials use whoever has full control of that share in the same format as above.
thanks for the help :)
Thanks for the video, perfext timing--I upgraded to Truenas 12 and added a new Volume and could not get the ACL permissions right, I know I could get it eventually, but your videos really help--
Great video
Thanks so much ! I was ready to pull my hair out and was a simple mistake i made. Can you show how to have a AD security group applied . My NAS is already joined and replicating changes to ACL domain list but Iâm struggling to work out AD ACL for TrueNas.
Good video but could you do it for SCALE too? I can't get to understand how SCALE ACL works. Thank you for your great work.
Any ideas about how to create AD User personal network drives with a set space of let's say 5 GB per user and proper permissions? Thanks for the awesome videos by the way
Brilliant Brilliant video Thank you so much
Glad you enjoyed it
Great video, can make more video to show how to create samba folder to share to particular users group only
The reason root/wheel doesn't work in FreeNAS 12 is because the wheel group doesn't have permissions for SMB authentication. If you show hidden groups and inspect the wheel group in the UI, you'll see that "Samba Authentication" is set to false. It doesn't seem possible to change this in the UI. I have verified that leaving the user root, but changing the group to a group that has "Samba Authentication: true" does work.
Helpful video. Lots of plugins are missing compared with Freeenas. How can i install them manually?
I like the simple explanation, expect you when I little too fast on login with marcus and copying some files. I tried to replicate what you did,, but I lost you. Thanks
thank you
Great video, a new sub!
Thanks for the sub!
Thanks for being knowledgeable, most are just slinging their mouth!! STRIP ACLS AND SET DAUGHTER TO GRANDSON GOOD OPTION
Hello, will you benchmark TrueNAS CORE? Some of us have 3x slower speed copying big files not in ZFS cache, compared to FreeNAS.
Thanks Lawrence. I'm an upgrade, rather then re-install user, and this problem has been bugging me for a couple of weeks now. Couldn't remember what I did those 2yrs ago to set things up. Don't know why things suddenly changed. Perhaps part of the upgrade process?
If you want to share a folder over public IP so some someone else can access the folder somewhere else. How would you set that up?
Thanks for this video Tom,. i am trying to wrap my head around why the dataset permission/owner is set to a regular user with a login? what if that user in the future don't need the access or left the company, wouldn't it make more sense to create a "storage" specific "system" user without a login and a group to own all the files dataset, and then set all users auxiliary group to that group?
You could do that, but this is targeted mostly for home users. Most businesses use Active Directory handle the permissions.
Awesome content. Though I am having issues where I have 2 truenas builds. Server 1 smb is no longer present on local comp. And server 2 is still visible and accessible. They both have the same permissions. Help?
Why not use root an wheel? What is the pratical difference between adding my user to wheel group or adding my user per acl?
What is the main difference between linux style permission and acl permission manager? I was using old FreNAS 9.2.x.x version and used linux style permissions but now I'm confused witch style of permission manager to use with new TrueNAS Core.
Is there anything similar on xigmanas? ACL settings on xigmanas don`t do anything at all. Tried different combinations of settings of ACL modes but nothing changes.
You have some great videos that have helped me. Does this work with a data set that was created before updating to 12.0? I updated last night and now I can't modify files from windows. I was using root because when I set freenas up originally, my windows user name was too long for freenas. Not long ago, I realized that I could setup a user with my windows user name. I already created that user but have not used it yet. I created a group under the same name for the ACLs and now I can't even access the folder.... Please Help me with my ignorance....
EDIT: Now Plex says that the drive is no longer mounted...... I managed to FUBAR it......
thumbs up
Hello how are you excellent video greetings from Argentina first of all, I wanted to ask how I can do the following
create two directory directory1 and this directory I gave the group: 1 user: 1 then create directory 2 and assign group: 2 and user: 1 to this but entering windows group 1 and user 1 sees all directory 2 and I was able to make modifications and others, how can I make it so that only user 1 and group 1 only see their directory, which would be 1, thanks.-
Great video. And thanks much. In terms of stripping ACLs, how do we strip acls from the whole pool? Still having issue with accessing data set from either Linux or Windows based system. I can see the shared datasets, however I am not able to go past the first folder without getting a second prompt to authenticate the user. But, even after inputting the right credentials, it says incorrect login/pass.
ACL's are assigned to datasets so that is where you remove or apply them.
Thank you for the video as it was helpful learning ACls and shares; however I am still having issue connecting with my windows PC. I have recreated the data sets and shares as well as stopped and restarted the SMB services but still no connection. ALl worked with version 11.2 but when I upgraded to 12.0 that is when everything broke. Any help you can provide would be so appreciated.
Can I suggest making sure the user account you are accessing from your PC is added in the ACL for the SMB? This tutorial focuses on ACL for datasets, not the SMB ACL
Tom thank you so much for your video. Everything is clear.
Recently with TrueNas 12 I have face a strange issue. For some user, excel and pdf file are not opening when stored on share. Checked permissions, but it seems to be correct. If same excel file stored on user local device, there is no problem. Could any one clarify on this ?
Not a problem I have encountered, try their forums
How do I set it so that my Datasets show underneath my pool in the Storage window ?
After 2 years ... there is much difference with Truenas Scale for this configuration? thank you.
Thank you for making this video, unfortunately for me I had to restore everything and go back to freenas 11.x Truenas 12 has been a nightmare for me, speed / stability and weird bugs. I hope truenas gets updated soon as I'd love to use the new bhyve with pci passthrough (for my USB controller).
Sorry to read about that. If it does PCI passthru does that mean hardware transcoding might be possible?
@@bikerchrisukk I think it is!
@@JoaoSilva-gs5jb Sweet, thanks!
theoretically, yes.
@@peterh7575 Thank you Peter đ
When I use the IP address, everything seems fine. However, when I try and use \\[NAME OF SERVER], the permission get messed up and can only see files and folders that I have created and not the other user in my group. Any ideas?
Setting up a regular ole' samba share on Linux is adding 5 lines to smb.conf
Can I delete the old dataset and make a new one without loosing the existing data? I just ran into this on mine.. been running for 7 years. Also I can only access mine with IP the DNS name no longer works is that by design?
I've encountered a strange (to me) behavior in Win10. I attempted to connect like you did, but I double clicked "TrueNAS" in the Network view on windows. But my defined user/pass would NOT be accepted. However when I went against the IP of the box, I was able to connect no problem. Not sure if windows is prefixing the username or something via the Network view. Any ideas what this could be?
Hi. How can i do add a freenas to zentyal's domain controller?
You already had a user created, what settings are required in the user?
As soon as I use Filesystem ACLs, it screws up the permissions for my jail mounts.
My issue is with a sub dataset, created an SMB share for it, and can't access it at all, only when I go through the parent dataset to the sub folder, but can't access the SMB share of the dataset directly. :(
Great video and great explanation of how permissions work with TrueNAS. This helped a little with my understanding of permissions.
How do you set the SMB Share to be recognized by the hostname and NOT by the IP address? Such as login to \\truenas and not \\192.168.x.x I cannot seem to figure that part out. I'd rather use the hostname instead of an IP address.
You need an entry in your DNS for that to work.
@@LAWRENCESYSTEMS can you be more specific? I was able to do this with Debian + Samba, and Ubuntu Server + Samba, but apparently not here.
Put an entry in your DNS server for the name
This helped...VERY clear!
hey LTS Frends, i run an ESXI Lab-Server with Truenas as VM and want connect my (Win10 PC with 2.5 GB Tbase EternetRJ45), Peer to Peer (about 15meter) how to? maybee with an mikrotik s+rj10 & mellanox ConnectX-2 how you would do it? otherwise my esxi have dual GB NICs how to make a trunk in esxi with my hp smart switch, do i need a static ip? once i get it, but lost after reconfigure
Hi @Lawrence ,just one thing.
I'm using Truenas to backup data from a cloud web hosting with PLESK, and another folder to share personal files.
I want FULL permissions from local PC to all those folders.
Do you think I should use ACL for both folders?
Without ACL, from plesk everything is running great but I have some problems with permissions accessing those folders from windows.
You can use ACL as long as you set them up properly.
dumb question, I noticed when you created tom & marcus you also created a group with their name then moved the users into the LTS group but left their initial user groups present. Are there any issues with making the LTS group first then when you create tom and marcus placing them in the LTS group during the creation? will this cause any issues?
It should still work.
I need to do this with AD groups & accounts, but any time I try to use something like Group = AD\Domain Admins I get "Error: [dacl] Item#0 is not valid per list types: [id] Not an integer". Other "solutions" I've found online don't resolve this. This is TrueNAS-13.0-U5.1 CORE. Anyone have any ideas? Tom, could you do a video on AD ACLs?
Is this different in Scale? I followed the guide completely but when typing the IP of the server in the Windows Explorer and then my user credentials, it always says "wrong username or password" even though I checked (with the eye icon to show the password in plain text) repeatedly and even re-created the user on the TrueNAS.
I'm not sure if this is even working correctly in Scale at all since there are also some problems before getting to this point:
1. When setting the ACLs, TrueNAS will never save changes to owner and group from the ACL dialogue. Owner and group can ONLY be changed if you use the regular permissions (non-ACL) dialogue and then switch to ACLs. If you want to change owner and group again, you have to strip everything, set the new o/g in the regular permissions dialogue and then switch to ACL again.
2. When selecting the dataset in the SMB share dialogue, it does not show the blue batch that says "ACL" behind the name of the dataset.
Really weird behavior on my Scale 22.12.2
Any idea how I setup FTP in addition to SMB. I added my user to the dataset and added them to the ftp group. And did some testing. Not sure how this new TrueNAS setup should be configured.
I have not had to use FTP in over 10 years, not something I have tested as it's an old insecure protocol.
hey dear, i want to stop past like .exe or etc extension file on TrueNas SMB Share
I'm having a problem with propagating newly created datasets... I've deleted old pools but I can still see it.
TU Ă BRABO CABELERA
I should have watch this 16mins video first before I went in the rabbit hole
What should i do if when i try to open share through smb it dont ask my login/password
Do you have, or know of a good video for using AD integration? Or, would it work to have the shares setup so that a particular user (An Admin for example) has full control of the share / folders, and then use Windows to set the permissions? Would those permissions 'transfer' over to the TrueNAS interface? Does the TrueNAS interface read the permissions live from the file and folder permissions?
I don't have a video on it, but TrueNAS does support AD integration and they have documentation on their site.
@@LAWRENCESYSTEMS I managed to muddle my way through it, and have my AD fully integrated with my TrueNAS Core install. AD user Home directories auto create and map to the users, and I'm able to maintain emergency administrator access to the directories as needed. It's good for a small org / home lab, but I wouldn't want to do this at scale..... (no pun intended)
If I create a new dataset, can I have it include data that was already existing on the drive beforehand?
Each new dataset will not have data until you put data into it.
Saved my ass! Im trippin over here wondering why it wont connect... dummy, you gotta create a share! 6:50 HA HA, FORGOT! +rep