Hi,
merry christmas to all!
I got issues with my lack of understanding windows cifs permissions implemented in freenas samba / zfs-datasets. I created a daatset /mnt/ao and shared a created folder in that dataset (mnt/ao/ao) and mapped it to Y: in windows. It had root:wheel permissions.
I created by connecting with ssh to freenas with mkdir a folder in /mnt/ao/ao and gave under Windows, with Explorer > Properties > Secyrity tab permissions everyone (Jeder) and f.floogy with full-access to it.
After the last update of Freenas ( FreeNAS-9.3-STABLE-201512121950 ) I got isses with cygwin access to the share. By mkdir created folders are behaving strange, they got not the right permissions/ACLs.
Unfortunately, now I might have already messed up permissions py trying to cope with the new situation.
I guess, I didn't set up the share the right way in the first place, and now, after a cifs / acl bug was solved, it creates issues, that I used wrong user:groups for the share?
In the release notes I found this:
I changed now the Permissions to f.floogy:domänen-users (dom-users) If i create a folder with explorer everything is fine. But if I create a folder by mkdir in cygwin, I got strange permission effects, but with
cmd /c mkdir cmd
everything seems to be fine.
But $ mkdir 13 under cygwin only ( without cmd /c ) got strange results:
Situation folder '13' (created by mkdir cygwin) versus cmd (created under cygwin by cmd.exe /c mkdir )
Same situation under cygwin64
I now created on freenas a new dataset data, with default values, but permissions for windows shares and with an AD user and Dom-users as group. I then created a folder in the new share from windows by using windows explorer (win 7 x64) and everything was fine in security tab. Then I cd into that new directory on the new created freenas share and created a folder by using cygwin64 mkdir. The permissions of that folder are messed up, and the user:dom-users are both not showing one singel check-symbol and seems not allowing anything. getfacl on freenas on that folder are showing permissions that look like that I should have access and see the check-icons in the security tab, but in Explorer there is no access visible.
https://bpaste.net/show/61cd7a617e91
merry christmas to all!
I got issues with my lack of understanding windows cifs permissions implemented in freenas samba / zfs-datasets. I created a daatset /mnt/ao and shared a created folder in that dataset (mnt/ao/ao) and mapped it to Y: in windows. It had root:wheel permissions.
I created by connecting with ssh to freenas with mkdir a folder in /mnt/ao/ao and gave under Windows, with Explorer > Properties > Secyrity tab permissions everyone (Jeder) and f.floogy with full-access to it.
After the last update of Freenas ( FreeNAS-9.3-STABLE-201512121950 ) I got isses with cygwin access to the share. By mkdir created folders are behaving strange, they got not the right permissions/ACLs.
Unfortunately, now I might have already messed up permissions py trying to cope with the new situation.
I guess, I didn't set up the share the right way in the first place, and now, after a cifs / acl bug was solved, it creates issues, that I used wrong user:groups for the share?
In the release notes I found this:
#12362 Bug Expected New created FreeNAS groups are not being mapped to Windows/Samba groups
Code:
freenas.hwg.local changes in mounted filesystems: 12c12 < freenas-boot/ROOT/FreeNAS-9.3-STABLE-201511280648 / zfs rw,noatime,nfsv4acls 0 0 --- > freenas-boot/ROOT/FreeNAS-9.3-STABLE-201512121950 / zfs rw,noatime,nfsv4acls 0 0
I changed now the Permissions to f.floogy:domänen-users (dom-users) If i create a folder with explorer everything is fine. But if I create a folder by mkdir in cygwin, I got strange permission effects, but with
cmd /c mkdir cmd
everything seems to be fine.
But $ mkdir 13 under cygwin only ( without cmd /c ) got strange results:
Situation folder '13' (created by mkdir cygwin) versus cmd (created under cygwin by cmd.exe /c mkdir )
Same situation under cygwin64
I now created on freenas a new dataset data, with default values, but permissions for windows shares and with an AD user and Dom-users as group. I then created a folder in the new share from windows by using windows explorer (win 7 x64) and everything was fine in security tab. Then I cd into that new directory on the new created freenas share and created a folder by using cygwin64 mkdir. The permissions of that folder are messed up, and the user:dom-users are both not showing one singel check-symbol and seems not allowing anything. getfacl on freenas on that folder are showing permissions that look like that I should have access and see the check-icons in the security tab, but in Explorer there is no access visible.
https://bpaste.net/show/61cd7a617e91
Code:
[root@freenas] ~# getfacl "/mnt/ao/data" # file: /mnt/ao/data # owner: f.floogy # group: domänen-benutzer owner@:rwxpDdaARWcCos:fd----:allow group@:rwxpDdaARWcCos:fd----:allow everyone@:r-x---a-R-c---:fd----:allow [root@freenas] ~# getfacl "/mnt/ao/data"/test_created_by_Explorer/ # file: /mnt/ao/data/test_created_by_Explorer/ # owner: f.floogy # group: domänen-benutzer owner@:rwxpDdaARWcCos:fd----:allow group@:rwxpDdaARWcCos:fd----:allow everyone@:r-x---a-R-c---:fd----:allow [root@freenas] ~# getfacl "/mnt/ao/data"/test_created_by_Explorer/test_created_by_cygwin64_mkdir/ # file: /mnt/ao/data/test_created_by_Explorer/test_created_by_cygwin64_mkdir/ # owner: f.floogy # group: domänen-benutzer group:f.floogy:rwxpDdaARWcCo-:------:allow group@:r-x---a-R-c---:------:allow everyone@:r-x---a-R-c---:------:allow group:90000008:rwxpDdaARWcCo-:fdi---:allow group:90000007:r-x---a-R-c---:fdi---:allow everyone@:r-x---a-R-c---:fdi---:allow [root@freenas] ~# Windows PowerShell Copyright (C) 2009 Microsoft Corporation. Alle Rechte vorbehalten. PS C:\Users\f.floogy> Get-Acl \\freenas\data | Format-List Path : Microsoft.PowerShell.Core\FileSystem::\\freenas\data Owner : MYDOM\f.floogy Group : MYDOM\Domänen-Benutzer Access : Jeder Allow ReadAndExecute, Synchronize MYDOM\Domänen-Benutzer Allow FullControl MYDOM\f.floogy Allow FullControl Audit : Sddl : O:S-1-5-21-3351802826-340867546-1299527722-1106G:DUD:(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;DU)(A;OICI;FA;;;S-1-5- 21-3351802826-340867546-1299527722-1106) PS C:\Users\f.floogy> Get-Acl \\freenas | Format-List Get-Acl : Der UNC-Pfad muss folgendes Format haben: \\server\share. Bei Zeile:1 Zeichen:8 + Get-Acl <<<< \\freenas | Format-List + CategoryInfo : InvalidArgument: (\\freenas:String) [Get-Acl], ArgumentException + FullyQualifiedErrorId : ItemExistsArgumentError,Microsoft.PowerShell.Commands.GetAclCommand Get-Acl : Der Pfad "\\freenas" kann nicht gefunden werden, da er nicht vorhanden ist. Bei Zeile:1 Zeichen:8 + Get-Acl <<<< \\freenas | Format-List + CategoryInfo : ObjectNotFound: (:) [Get-Acl], ItemNotFoundException + FullyQualifiedErrorId : GetAcl_PathNotFound_Exception,Microsoft.PowerShell.Commands.GetAclCommand PS C:\Users\f.floogy> Get-Acl \\freenas\data\test_created_by_Explorer | Format-List Path : Microsoft.PowerShell.Core\FileSystem::\\freenas\data\test_created_by_Explorer Owner : MYDOM\f.floogy Group : MYDOM\Domänen-Benutzer Access : MYDOM\f.floogy Allow FullControl MYDOM\Domänen-Benutzer Allow FullControl Jeder Allow ReadAndExecute, Synchronize Audit : Sddl : O:S-1-5-21-3351802826-340867546-1299527722-1106G:DUD:(A;OICIID;FA;;;S-1-5-21-3351802826-340867546-1299527722-1 106)(A;OICIID;FA;;;DU)(A;OICIID;0x1200a9;;;WD) PS C:\Users\f.floogy> Get-Acl \\freenas\data\test_created_by_Explorer\test_created_by_cygwin64_mkdir | Format-List Path : Microsoft.PowerShell.Core\FileSystem::\\freenas\data\test_created_by_Explorer\test_created_by_cygwin64_mkdir Owner : MYDOM\f.floogy Group : MYDOM\Domänen-Benutzer Access : Jeder Allow ReadAndExecute, Synchronize ERSTELLER-BESITZER Allow FullControl ERSTELLERGRUPPE Allow ReadAndExecute, Synchronize MYDOM\Domänen-Benutzer Allow ReadAndExecute, Synchronize MYDOM\f.floogy Allow FullControl Audit : Sddl : O:S-1-5-21-3351802826-340867546-1299527722-1106G:DUD:P(A;OICI;0x1200a9;;;WD)(A;OICIIO;FA;;;CO)(A;OICIIO;0x1200 a9;;;CG)(A;;0x1200a9;;;DU)(A;;FA;;;S-1-5-21-3351802826-340867546-1299527722-1106) PS C:\Users\f.floogy>
Last edited:
