JumpingMarc
Cadet
- Joined
- Mar 17, 2023
- Messages
- 3
Hi,
Some info on my setup.
A visual representation of my directory tree.
I have a Dataset shared with SMB and permissions set by NFSv4 ACL. The ACL contains a Domain Local group witch have as members multiples other Domain Local groups. On one child Dataset, the ACL contains a Domain Local group member of the aforementioned Domain Local group. When editing ACL, after hitting "Save Access Control List" I get the following error:
My question: Is there a way the allow the ACL to take into account the fact that the "DOMAIN\DomainLocalGroup" is a member of the "DOMAIN\DomainLocalGroupOfAllGroups" and therefore should have execute permissions on the path: /mnt/zfs_pool_1/data/01_Folder?
Some info on my setup.
- TrueNAS-SCALE-22.12.1
- NFSv4 ACL
- Directory Services using Active Directory
A visual representation of my directory tree.
Code:
|->01_Folder [SMB Share, Everyone, full access] | [NFSv4 permissions DOMAIN\DomainLocalGroupOfAllGroups, Basic-Full Control] |-> 02_Folder [NFSv4 permissions DOMAIN\DomainLocalGroup(member of DOMAIN\DomainLocalGroupOfAllGroups), Basic-Read]
I have a Dataset shared with SMB and permissions set by NFSv4 ACL. The ACL contains a Domain Local group witch have as members multiples other Domain Local groups. On one child Dataset, the ACL contains a Domain Local group member of the aforementioned Domain Local group. When editing ACL, after hitting "Save Access Control List" I get the following error:
[EPERM] Filesystem permissions on path /mnt/zfs_pool_1/data/01_Folder prevent access for group DOMAIN\DomainLocalGroupOfAllGroups to the path /mnt/zfs_pool_1/data/01_Folder/02_Folder. This may be fixed by granting the aforementioned group execute permissions on the path: /mnt/zfs_pool_1/data/01_Folder.
My question: Is there a way the allow the ACL to take into account the fact that the "DOMAIN\DomainLocalGroup" is a member of the "DOMAIN\DomainLocalGroupOfAllGroups" and therefore should have execute permissions on the path: /mnt/zfs_pool_1/data/01_Folder?