Security questions

[insolent]

I'm prepped to rebuild my server, the last time I did it I struggled to get something that resembles a secured server. I just wanted it so I could control who has access to the shares, and not leave it wide open to just anyone that managed to crack my WPA key.

I don't know how, but I did manage to set up the jails; it was a miserable experience. They were fine until I upgraded. Then nothing ever worked right and I gave up.

Now for my real question, is there a method that could simplify managing access or would I just be better off using iscsi and letting a Windows Server OS handle that? Is there any chance the CIFS shares could reference AD structure if I spun up something like a turnkey domain controller?

I'm sitting at work pondering ideas, which I am sure have been thoroughly shot down before.

 

[Mirfster]

Now for my real question, is there a method that could simplify managing access

Yes, Users and Groups as well as setting permissions on Datasets..

Is there any chance the CIFS shares could reference AD structure if I spun up something like a turnkey domain controller?

Yes, but FreeNas can also act as a DC too...

Start here (there is a 9.10 version as well, just didn't have the link readily available):
https://forums.freenas.org/index.php?threads/9-3-x-user-guide.38925/