Group Permission changed in windows is not changing the main group (@group)

[kotani]

I've setup a freenas server running version 11.2 U5.
I've setup datastores and smb shares, all using windows permission setup.

I'm having trouble changing the main "@group" group of files and folders from windows.

This is the result of getfacl before the change is made:
root@freenas[/mnt/storage/]# getfacl /mnt/storage/testfolder
# file: /mnt/storage/test3/test
# owner: admin
# group: default_group
owner@:rwxpD-aARWcCo-:-------:allow
group@:rwxp--a-R-c--s:-------:allow

After I have removed the default_group, in windows, I have added a new group "new_group" in it's place. The permissions seem to be working find in windows, but when I run getfacl on the folder, this is what I get:

root@freenas[/mnt/storage/]# getfacl /mnt/storage/testfolder
# file: /mnt/storage/test3/test
# owner: admin
# group: default_group
owner@:rwxpD-aARWcCo-:-------:allow
group:new_group:rwxp-daARWc---:fd-----:allow

As you can see, the main group is still the "default_group" with no permissions of course, while a "group:new_group" entry is explicitly defined in place of "@group".

Is this the standard way this system is supposed to work?

I want to be able to change the main group if possible in windows, as I'm trying to rsync to a non-freenas backup server, while preserving the windows permissions.
I'd like to see output like this as if I used "chgrp new_group testfolder" :

root@freenas[/mnt/storage/]# getfacl /mnt/storage/testfolder
# file: /mnt/storage/test3/test
# owner: admin
# group: new_group
owner@:rwxpD-aARWcCo-:-------:allow
group@:rwxp-daARWc---:fd-----:allow

Please let me know if you have any insights!
Thank you very much!

 

[0x4161726f6e]

The Windows GUI doesn't display information about group:/group@. Samba translates group@ to default_group, so basically Windows sees:
group:default_group:rwxp--a-R-c--s:-------:allow

There are some odd things that happen in the NFSv4ACLs <--> Samba <--> Windows that go mostly unnoticed. I wouldn't worry about it unless it is causing access issues.
If you want permissions to act more like Windows set inherit owner = yes
https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html#INHERITOWNER
Another helpful thing nfs4:mode = simple
https://www.ixsystems.com/community...redirection-and-creator-owner-problems.50986/

 

[kotani]

Hello Aaron,

Thank you so much for you help! I finally understand how the different ACLs modes affect the system. Also, you have helped me understand how windows sets permissions. I'll see if I can figure out his rsync problem now.

Thanks again!