SOLVED CIFS Sharing gives full access

[Neeraj Saraf]

Dear All:

I have 2 data sets i.e. NeerajPersonal and SealTeam. Also 2 users Neeraj and Staff. Neeraj is a member of wheel and access is given at /mnt/Primary_3x1TB, Where is Staff is member of SealTeam and access is given at /mnt/Primary_3x1TB/SealTeam,

Both have different passwords.

I, i.e. Neeraj, want to access everything. But when the Staff users connect to \\192.168.1.18\, they are able to see both shares and once they have input their user name and password, they are able to access NeerajPersonal share also, which I do NOT want, in addition to the desired SealTeam folder.

What am I doing wrong?

Regards
Neeraj

 

[anodos]

Watch this video:

https://youtu.be/QhwOyLtArw0

I personally would create two datasets:
/mnt/Primary_3x1TB/neeraj

And

/mnt/Primary_3x1TB/SealTeam

Then point your shares at them, and remove the 'everyone' ACE.

 

[Neeraj Saraf]

Hmmm...that does make sense...thanks mate...

BTW, removing the everyone ACE is to be done on Windows explorer, right? Or is there on FreeNAS also?

Thanks

Watch this video:

https://youtu.be/QhwOyLtArw0

I personally would create two datasets:
/mnt/Primary_3x1TB/neeraj

And

/mnt/Primary_3x1TB/SealTeam

Then point your shares at them, and remove the 'everyone' ACE.

 

[nojohnny101]

BTW, removing the everyone ACE is to be done on Windows explorer, right? Or is there on FreeNAS also?

Windows.

 

[Neeraj Saraf]

Windows.

Thanks bud...it's done as I wanted....just out of curiosity and furtherance of knowledge...is this not possible on FreeNAS level?

Regards

 

[nojohnny101]

Windows permissions as far as I know should be initially setup specified in the FreeNAS GUI and then further refined from Windows itself.

 

[Mirfster]

Thanks bud...it's done as I wanted....just out of curiosity and furtherance of knowledge...is this not possible on FreeNAS level?

It can be, but not really the *preferred* method. This also helps with "ease of administration".

Think of it this way, I have a group in FreeNAS named "ServerAdmins". Now in that group I add accounts of those I want to be able to Create Folders and Set Permissions in a CIFS Share.

So, if I add "JohnDoe" to this group; that person can then Administer the Folder(s) without them having to know the FreeNAS root password or connect to the FreeNAS GUI. All they have to do is connect to the Share with proper credentials.

 

[Ericloewe]

Windows permissions as far as I know should be initially setup specified in the FreeNAS GUI and then further refined from Windows itself.

In a way... The only thing you can do from the FreeNAS GUI is set the ownership and apply sane defaults.

 

[Neeraj Saraf]

It can be, but not really the *preferred* method. This also helps with "ease of administration".

Think of it this way, I have a group in FreeNAS named "ServerAdmins". Now in that group I add accounts of those I want to be able to Create Folders and Set Permissions in a CIFS Share.

So, if I add "JohnDoe" to this group; that person can then Administer the Folder(s) without them having to know the FreeNAS root password or connect to the FreeNAS GUI. All they have to do is connect to the Share with proper credentials.

Got it...thank you

 

[Neeraj Saraf]

In a way... The only thing you can do from the FreeNAS GUI is set the ownership and apply sane defaults.

Noted...thank you

 

[m0nkey_]

Windows permissions as far as I know should be initially setup specified in the FreeNAS GUI and then further refined from Windows itself.

This is the correct answer.

 

[anodos]

This is the correct answer. :)

It's too bad there isn't a button to just flag the correct answer. :D