Explanation on SMB ACLs needed

[Aebian]

Hi folks,

I'm currently trying to setup an SMB (Windows) share and seem to struggle with the permissions.
The Scale Box is connected to the active directory and the connection is healthy.

However I seem to be unable to get a hang on the ACLs.
None of my domain users can access the share. I tried to follow an old guide from TrueNAS but it doesn't really work.

Can you please elaborate what is needed to get it working?

 

[Kris Moore]

Have you gone through and set up your dataset ACL / Permissions yet? How are those setup?

Permissions |

Permissions

www.truenas.com

 

[Aebian]

Hi Kris,

I have, albeit I'm not sure if everything is in order.

One user I test with has the AD group "perm_it_fileserver01_sudo" so he should have full permissions.

 

[Kris Moore]

If you run the command "getent passwd" do you see your AD users listed? On mine anyway, the syntax is something like DC010\<user>

 

[Aebian]

I can see the user, but it seems to be locally created (automatically, I haven't done it myself)

So there is no domain\user present.

 

[Terabyte]

I have the same problem but getent passwd shows me every user and wbinfo -u / wbinfo -g shows me all the users and groups, but when I attempt to use AD\Domain Admins or AD\Domain Users I get an error like this: "Error: [dacl] Item#0 is not valid per list types: [id] Not an integer"

Thoughts?

 

[Johnny Fartpants]

None of my domain users can access the share

Based on your ACL I can’t see anything that would allow all domain users to be able to.

perm_it_fileserver01_sudo

This group looks fine on the ACL.

Can you send a screenshot of how you are trying to connect and errors? Also can you share your AD config settings in TN feel free to blur out names.