Group Owner Write-Permissions Not Working on ZFS Dataset/CIFS Share

[mnetwork]

I have created a new FreeNAS box (8.0.2). I have setup CIFS and AD and it is joined to my domain and has imported users and groups. I then created a ZFS volume, ZFS dataset, and CIFS share (connected to the dataset I just created).

The ZFS dataset permissions and the CIFS Windows ACL are both shown in screenshots in this post. If I select/de-select Group Write NOTHING changes. This same thing happens with Other. The only one where permissions actually set correctly is User Owner.

Why is it acting this way? How do I resolve this?

 

[strafelife]

I have the exact same issue. Active Directory, CIFS - all configured correctly. Permissions on the storage volume is set to "windows acl", and a proper share setup. I can access the share, and view security permissions...I can remove the "everyone" and group permissions, I just cannot add any Windows based groups/accounts. It immediately clears the addition. This has to be a bug.

 

[strafelife]

Ah - it looks like a fix is coming. According to the post, we should see this resolved in about a week.
http://forums.freenas.org/showthread.php?5078-8-0-3-RELEASE-coming-soon


Bugfixes:
1. Rsync task/crontab generation was broken with AD usernames and other unsanitized input.

Bugfixes:
1. AD/CIFS:
a. Fix the AD interoperability issue at boot and when enabling for the first time (see tickets: 900, 1009).
2. AD/CIFS:
a. Bump samba from 3.5.11 to 3.6.1.
b. Fix AD clock skew issues and other problems when authenticating to an AD realm (see ticket: 1056, ).

 

[mnetwork]

None of those bug fixes really sound like they fix this issue.

 

[ProtoSD]

Like I mentioned in another post earlier, the best way to get problems fixed is to open a ticket @ http://support.freenas.org

The developers do read through some of this stuff, but expecting them to keep track of all the problems or open tickets for you doesn't leave them much time for developing! ;)

I know I've seen this problem posted here already, but I'm not sure if there's a ticket. Once you go there you can search, but you'll need to create an account to open a ticket.

 

[mnetwork]

Like I mentioned in another post earlier, the best way to get problems fixed is to open a ticket @ http://support.freenas.org

The developers do read through some of this stuff, but expecting them to keep track of all the problems or open tickets for you doesn't leave them much time for developing! ;)

I know I've seen this problem posted here already, but I'm not sure if there's a ticket. Once you go there you can search, but you'll need to create an account to open a ticket.

Ticket has been submitted. http://support.freenas.org/ticket/1078