zenon1823
Explorer
- Joined
- Nov 13, 2018
- Messages
- 66
Hello all, been lurking around the shadows for awhile now and have been able to get all my answers thus far by way of searching and YouTube, but I'm outa ideas on this one. I seen a similar post that curiously fixed itself, but mine has not. I have included a bunch of the information that was requested in that post. I have provided samples from one share, but its happening across multiple shares and pools. As this has been a test build I was doing alot of various configuration learning the ins/outs of how to setup volumes, shares permissions etc. This included the creating and deleting of users and it seems the issues started after I deleted some test users and created some real users.
When I right clicking any of the shares/files and looking at the windows security properties, the owner user is properly enumerated but the owner group isn't ... it's showing Account Unknown and the SID. The owner user is the same as what I was logged on as in windows when creating those files.
FreeNAS version is: FreeNAS-11.1-U6
smb4.conf:
EDIT:
I don't know if its related, but I just noticed that in the webui the userID and groupID numbers do not match up to the ID's I see when running the commands net groupmap list & get usersidlist as shown above. (see image below)
I'm not sure if that means anything or not, from the look of SID in the windows permissions its saying it should be groupID 1002, but that's not a valid group ID in either the freenas webgui or the groupmap output.
When I right clicking any of the shares/files and looking at the windows security properties, the owner user is properly enumerated but the owner group isn't ... it's showing Account Unknown and the SID. The owner user is the same as what I was logged on as in windows when creating those files.
FreeNAS version is: FreeNAS-11.1-U6
Code:
[root@freenas /mnt/PriData]# getfacl /mnt/PriData/Temp # file: /mnt/PriData/Temp # owner: nobody # group: Husers group@:rwxpDdaARWcCo-:fd-----:allow everyone@:r-x---a-R-c---:fd-----:allow owner@:rwxpDdaARWcCo-:fd-----:allow [root@freenas ~]# net getlocalsid Environment LOGNAME is not defined. Trying anonymous access. SID for domain FREENAS is: S-1-5-21-840822762-2033700010-180462736 [root@freenas ~]# net groupmap list Environment LOGNAME is not defined. Trying anonymous access. Zgroup (S-1-5-21-840822762-2033700010-1804627366-1005) -> Zusers Husers (S-1-5-21-840822762-2033700010-1804627366-1004) -> Husers [root@freenas ~]# net usersidlist Environment LOGNAME is not defined. Trying anonymous access. FREENAS\zenon S-1-5-21-840822762-2033700010-1804627366-1006 S-1-1-0 S-1-5-2 S-1-5-11 FREENAS\tanya S-1-5-21-840822762-2033700010-1804627366-1008 S-1-1-0 S-1-5-2 S-1-5-11
smb4.conf:
Code:
[global] server min protocol = SMB2 server max protocol = SMB3 encrypt passwords = yes dns proxy = no strict locking = no oplocks = yes deadtime = 15 max log size = 51200 max open files = 470729 logging = file load printers = no printing = bsd printcap name = /dev/null disable spoolss = yes getwd cache = yes guest account = nobody map to guest = Bad User obey pam restrictions = yes ntlm auth = no directory name cache size = 0 kernel change notify = no panic action = /usr/local/libexec/samba/samba-backtrace nsupdate command = /usr/local/bin/samba-nsupdate -g server string = FreeNAS ea support = yes store dos attributes = yes lm announce = yes hostname lookups = yes unix extensions = no time server = yes acl allow execute always = true dos filemode = yes multicast dns register = yes domain logons = no local master = yes idmap config *: backend = tdb idmap config *: range = 90000001-100000000 server role = standalone netbios name = FREENAS workgroup = ZENARC security = user create mask = 0666 directory mask = 0777 client ntlmv2 auth = yes dos charset = CP437 unix charset = UTF-8 log level = 1 [Backup_Client] path = "/mnt/BckData/Backup_Client" printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes access based share enum = no vfs objects = zfs_space zfsacl streams_xattr hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [Backup_Local] path = "/mnt/BckData/Backup_Local" printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes access based share enum = no vfs objects = zfs_space zfsacl streams_xattr hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [Backup_Offsite] path = "/mnt/BckData/Backup_Offsite" printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes access based share enum = no vfs objects = zfs_space zfsacl streams_xattr hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [Backup_Web] path = "/mnt/BckData/Backup_Web" printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes access based share enum = no vfs objects = zfs_space zfsacl streams_xattr hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [Home] path = "/mnt/PriData/Home" printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes access based share enum = no shadow:snapdir = .zfs/snapshot shadow:sort = desc shadow:localtime = yes shadow:format = auto-%Y%m%d.%H%M-1w shadow:snapdirseverywhere = yes vfs objects = shadow_copy2 zfs_space zfsacl streams_xattr hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [Media] path = "/mnt/PriData/Media" printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes access based share enum = no shadow:snapdir = .zfs/snapshot shadow:sort = desc shadow:localtime = yes shadow:format = auto-%Y%m%d.%H%M-1w shadow:snapdirseverywhere = yes vfs objects = shadow_copy2 zfs_space zfsacl streams_xattr hide dot files = yes guest ok = yes nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [Software] path = "/mnt/PriData/Software" printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes access based share enum = no shadow:snapdir = .zfs/snapshot shadow:sort = desc shadow:localtime = yes shadow:format = auto-%Y%m%d.%H%M-1w shadow:snapdirseverywhere = yes vfs objects = shadow_copy2 zfs_space zfsacl streams_xattr hide dot files = yes guest ok = yes nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [Temp] path = "/mnt/PriData/Temp" printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes access based share enum = no shadow:snapdir = .zfs/snapshot shadow:sort = desc shadow:localtime = yes shadow:format = auto-%Y%m%d.%H%M-1w shadow:snapdirseverywhere = yes vfs objects = shadow_copy2 zfs_space zfsacl streams_xattr hide dot files = yes guest ok = yes nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare
EDIT:
I don't know if its related, but I just noticed that in the webui the userID and groupID numbers do not match up to the ID's I see when running the commands net groupmap list & get usersidlist as shown above. (see image below)
I'm not sure if that means anything or not, from the look of SID in the windows permissions its saying it should be groupID 1002, but that's not a valid group ID in either the freenas webgui or the groupmap output.
Last edited:
