how to set different user permisions on cif share's

[arnoldg]

Hello,

i have several cifs share's now i wan't to set several users per cif share
how can do this.


below an example what i wan't

cifs share 1 : user 1, user 2, user 4
cifs share 2 : user 1, user 3
cifs share 3 : user 2, user 4

 

[bertrem]

I think you can do this by putting each unique combination of users into a group and then making each of those shares the home directory for that group, i.e.:
groupA includes user1,user2,user4 and home dir = share1
groupB includes user1,user3 and home dir = share2
etc.

A bit clunky, but maybe it works.

 

[Iman230]

I have this question too, and I try to create groups and Separated zfs Data set and Users to separated them but it not work
when a user login all off cifs can see the shares
is any solution ?

 

[Gonzalo]

One message per year...

Maybe this video could help.

Regards.

 

[Viki Povi]

Hello
I have this problem also, and I have not found a way around it.
Can anyone help us?
I want the easiest permission setup: each user group has a share, the members of the group do not see datas of the other groups.
This can be solved somehow?
Thanks for yous help

 

[Viki Povi]

I solved the problem

 

[Gonzalo]

Viki, maybe you can share your solution so you can help others like you...

 

[Viki Povi]

Sorry for the delay. My solution was this:
I created a zfs dataset, for example the name is familyNAS. Important, this dataset permission type is: windows !
Then I created additional datasets under the familyNAS, their names fathersdata, mothersdata, childrensdata etc. These datasets permissions types are: unix.
So here you can adjust the individual shares permission.
So it works for me, everyone can enter your own password-protected sharing only.
I hope I could help you
bye
(I use 9.3 version)

 

[FreeNASftw]

Hello,

I'm using 9.2.1.5 and quite literally ALL I want to do is get CIFS permissions to work like I "think" they should. I have a single user 'bob' in a group 'bob', three datasets 'media', 'backups', 'test'. 'bob' is the owner of 'test' and has full acces but for the life of me I can't restrict his access to the other two (media + backups), I managed to remove his ability to write to the folders but I can't restrict his ability to open/read the folders. It appears the local authentication option is removed from newer builds, something to do with SAMBA issues... Anyway, this should be extremely basic but googling shows a LOT of people having issues with it and all the instructions I can find are out dated or simply don't work.

Any help much appreciated.

 

[Ericloewe]

Where's the problem?

Assign owners to the relevant datasets, Windows permissions.
Set up sharing for them, CIFS.
From a client machine, log onto the server as the owner of each share/dataset and set the permissions to your liking.

 

[Viki Povi]

My solution was this in 9.3 version:
You created a main zfs dataset, for example the name is mainNAS. Important, this dataset permission type is: WINDOWS ! The owner (user): ROOT, the owner (group): WHEEL. Set permission recursively: NO.
Then created additional datasets under the mainNAS, their names media, backups, test or other. These datasets permissions types are: UNIX ! The owner (user): bob, the owner (group): bob. Set permission recursively: NO.
So here you can adjust the individual shares permission, in the mode: Owner and Group every Yes, Other every NO.
Obviously, in the windows shares (cifs) set: apply Default Permissions: YES, and allow Guest Access: NO.
I hope I could help you
bye

 

[FreeNASftw]

Thanks Viki, Can someone explain why the permission types need to be set to unix (not arguing, just for my own interest)? I'll give your idea a go after dinner.

 

[Ericloewe]

Thanks Viki, Can someone explain why the permission types need to be set to unix (not arguing, just for my own interest)? I'll give your idea a go after dinner.

They do not.

The basic setup is outlined in the getting started part of the manual.

 

[diedrichg]

The basic setup is outlined in the getting started part of the manual.

Is that the fabled 'permissions guide' that has been been dangled like a dog treat by cyberjock for six+ months?

 

[Ericloewe]

Is that the fabled 'permissions guide' that has been been dangled like a dog treat by cyberjock for six+ months?

No, but it's enough to figure it out enough to get things working.

I'm still waiting for that guide, as well. I've been running into a few edge cases that I'm not sure how to deal with.

 

[diedrichg]

I have been holding off upgrading/fresh install of 9.3 because of that guide. Now that I know the rest of the OS I want to make sure that my permissions are perfect for the perfect build.

 

[FreeNASftw]

Wow don't I feel like a tool... thanks Ericloewe, I was googling for a long time and never came across that answer. I'm sure I read that part of the doco previously but must have forgotten all about it. Lol... I know what I'll be doing tomorrow!