FAQS: Managing SMB permissions

Status
Not open for further replies.
S

Samantha Bonham

Guest
Hi folks,

I'm working on a FreeNAS FAQ, and I was hoping you could help me. Do you know of any FAQs for managing SMB Permissions? Any other general sharing FAQS are also welcome!

Thanks,

Samantha
 

m0nkey_

MVP
Joined
Oct 27, 2015
Messages
2,739
I created a how-to video a while back (see signature) which seems to help people get started with SMB shares.
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,553
Here's a forum thread on the topic: https://forums.freenas.org/index.ph...-of-how-to-configure-share-permissions.35276/

Although there are rumors that an ixsystems employee who goes by the handle @cyberjock has a permissions guide that basically answers all permissions questions.

For a background on some of the issues that users have, see the discussion here: https://forums.freenas.org/index.php?threads/cant-chmod-files-operation-not-permitted.22229/page-3

Probably a key point in the FAQ is that per Jordan Hubbard @jkh ,
To be very clear, the docs should state the following:

1. For sharing with Windows clients, the share type must be set to Windows [Samba]
2. For sharing with Unix clients, the share type must be set to UNIX [NFS]
3. For sharing with Macintosh (or other AFP) clients, the type must be set to Mac [AFP]

Sharing a single dataset to multiple client types is NOT supported as the differences in the various file locking and permission semantics across these different operating systems may cause data corruption (in the case of lock contention) or unexpected permissions behavior. When the Windows type is used, Unix permission changes are in fact disallowed (chown/chmod does not work) as those changes would also cause the loss of important Windows ACLs.

If you must share the same dataset across heterogenous operating systems, then pick the same sharing protocol. Unix machines are capable of speaking SMB, and Windows machines are capable (albeit poorly) of speaking NFS. Macintosh clients can do any of the above (and are quite happy to use NFS or SMB as well as AFP)

[...]

We've been down this road before, and we got a lot of tickets from users who hung themselves trying to do this. Those users are, indeed, holding it wrong and can accomplish their goals using the more modern methods - they don't need to return their boxes to the bad old days when Samba lied and pretended to offer Unix permissions to Windows clients.
See here: https://bugs.freenas.org/issues/11390
(all areas enclosed in brackets [ ] are my addition.)

This means that using the "windows" permissions type is the only supported way of configuring permissions on a samba share in FreeNAS.
 
Last edited:
Status
Not open for further replies.
Top