SOLVED Hide smb share to mac users without read or write permission on 12.0-U2

[korrupto77]

Hi all,
I'd like to hide in order to keep as cleanest as possibile shares. I'm just moved from form AFP to SMB and one think i've noted is the behaviour of smb shows all shares to all user differently from AFP. In the attached sketch, i've represented a pool's structure in order to let you better understand the situation.On finder zeroconf announce Freenas and the mounted from user it shows share 1 & 2. What i'd like to achieve (that was working on AFP), is hide share1 to a group (B). I've tried with "Access Share Enumaeration" but works only with sub dataset and doesn't help.
The reason for do not move Dataset 1 to Dataset 2 is maintain a separate share in order to allows certain IP only.
Thanks in advance for help

 

[seanm]

"access based share enumeration" is the way to make some shares invisible to some users. These threads may help you:

SMB shares show even if user doesn't have permission

I've created datasets in a pool that have permissions set only giving certain groups to each dataset. Then, I've created Windows shares that each have their path set to each dataset created. When users connect to the NAS either in Windows or in MacOS, Windows Explorer / Mac Finder both show...

www.ixsystems.com

Methods For Fine-Tuning Samba Permissions

Caveat: This is a work-in-progress Correctly setting permissions on any server requires care and planning. In the case of Samba servers this becomes even more important for the server administrator because he or she has to understand the differences between Windows and Unix permissions models...

www.ixsystems.com

 

[korrupto77]

Thanks for the support, i’m gonna read carrefully those post.
regards

 

[anodos]

Thanks for the support, i’m gonna read carrefully those post.
regards

Big picture, if these are local users, create a group, put everyone _except_ macos users in it, then modify the "share" (not filesystem) ACL through the GUI to grant that group "FULL_CONTROL" and remove the everyone entry from it. Then check the "access-based share enumeration" checkbox in the share config.

 

[korrupto77]

Big picture, if these are local users, create a group, put everyone _except_ macos users in it, then modify the "share" (not filesystem) ACL through the GUI to grant that group "FULL_CONTROL" and remove the everyone entry from it. Then check the "access-based share enumeration" checkbox in the share config.

Thanks for suggestions,

i've tested the share ACL and works on Windows only; if i'm giving access to specific group it works on windows side but not in mac where the same share is still visible.
For my purpose is much more important the MAC users than can have on finder the share where they only have access

Regards

 

[anodos]

Thanks for suggestions,

i've tested the share ACL and works on Windows only; if i'm giving access to specific group it works on windows side but not in mac where the same share is still visible.
For my purpose is much more important the MAC users than can have on finder the share where they only have access

Regards

Sorry. Misread. Do the opposite then. Create MacOS group then repeat steps like above.

 

[korrupto77]

Sorry. Misread. Do the opposite then. Create MacOS group then repeat steps like above.

Thanks for specify, this solution works perfectly for some user but for other is still visible. Now i think i have to check acl’s ...

 

[korrupto77]

"access based share enumeration" is the way to make some shares invisible to some users. These threads may help you:

SMB shares show even if user doesn't have permission

I've created datasets in a pool that have permissions set only giving certain groups to each dataset. Then, I've created Windows shares that each have their path set to each dataset created. When users connect to the NAS either in Windows or in MacOS, Windows Explorer / Mac Finder both show...

www.ixsystems.com

Methods For Fine-Tuning Samba Permissions

Caveat: This is a work-in-progress Correctly setting permissions on any server requires care and planning. In the case of Samba servers this becomes even more important for the server administrator because he or she has to understand the differences between Windows and Unix permissions models...

www.ixsystems.com

Thanks , it has been very helpful

 

[korrupto77]

Thanks for specify, this solution works perfectly for some user but for other is still visible. Now i think i have to check acl’s ...

I've discovered a quite strange behaviour; if i'm deleting and re-creating the same user with same specs is working perfectly. With old users or group it'doesn't. Have you heard something about ?
Regards