flightrisk314
Cadet
- Joined
- Mar 27, 2023
- Messages
- 3
Hopefully somebody can clue me into where I'm being an idiot before a throw TrueNAS in the bin forever.
I'm trying to replace some Synology NAS boxes and with my budget TrueNAS seems to be the best option by adding ZFS and more freedom of what I can do with it. And I don't have the budget for an 'Enterprise NAS' like NetApp, HP, Dell etc.
I've joined the NAS to an AD domain, created a Dataset with the SMB share preset. Created the SMB share with default permissions.
Great. Everything is working flawlessly, even Kerberos authentication!
But that just leaves the default user group with access. The Domain Admins group in this case. But I need to add more groups or users.
So I try adding a test user to the Dataset ACL in the WebGUI. Nope.
Okay, SMB share ACL? Nope.
Okay. Windows client? Nope.
For clarity. The test user ACE does update and appear in the Windows client if I apply on the dataset ACL, and vice versa when I apply the ACE from the Windows client, it appears in the dataset ACL.
But never the SMB ACL's which is really confusing me. No matter what I do...They seem irrelevant.
So despite all the ACL's I can see saying the test user can access the share...it can't. Only ever the users or group I set when creating the SMB share.
Please can somebody enlighten me as to what I'm missing?
I'm trying to replace some Synology NAS boxes and with my budget TrueNAS seems to be the best option by adding ZFS and more freedom of what I can do with it. And I don't have the budget for an 'Enterprise NAS' like NetApp, HP, Dell etc.
I've joined the NAS to an AD domain, created a Dataset with the SMB share preset. Created the SMB share with default permissions.
Great. Everything is working flawlessly, even Kerberos authentication!
But that just leaves the default user group with access. The Domain Admins group in this case. But I need to add more groups or users.
So I try adding a test user to the Dataset ACL in the WebGUI. Nope.
Okay, SMB share ACL? Nope.
Okay. Windows client? Nope.
For clarity. The test user ACE does update and appear in the Windows client if I apply on the dataset ACL, and vice versa when I apply the ACE from the Windows client, it appears in the dataset ACL.
But never the SMB ACL's which is really confusing me. No matter what I do...They seem irrelevant.
So despite all the ACL's I can see saying the test user can access the share...it can't. Only ever the users or group I set when creating the SMB share.
Please can somebody enlighten me as to what I'm missing?