Windows ACL vs Linux does matter?

[Mattia3rd]

Hi everybody,

I have an interesting question, maybe it has been asked many other times, but this is bothering me:

I have a Dataset configured with Windows ACL and it's shared with SMB protocol.
The first time I configured the user and the group on this dataset from UI with ACL manager and everything is perfect.
Also from CLI into my FreeNAS I see the user and the group as the owners of the Dataset/folders/files.

Now comes the tricky part:
(Let's do an example)
If I add another user to this dataset (permissions doesn't matter), from ACL manager or from Windows Explorer doesn't matter, I see from CLI in the FreeNAS that the owner of the Dataset/folders/files changes from the default user to this new user.

Do I need to take care of this change?
Is this important for the ownership of files?

 

[anodos]

Hi everybody,

I have an interesting question, maybe it has been asked many other times, but this is bothering me:

I have a Dataset configured with Windows ACL and it's shared with SMB protocol.
The first time I configured the user and the group on this dataset from UI with ACL manager and everything is perfect.
Also from CLI into my FreeNAS I see the user and the group as the owners of the Dataset/folders/files.

Now comes the tricky part:
(Let's do an example)
If I add another user to this dataset (permissions doesn't matter), from ACL manager or from Windows Explorer doesn't matter, I see from CLI in the FreeNAS that the owner of the Dataset/folders/files changes from the default user to this new user.

Do I need to take care of this change?
Is this important for the ownership of files?

What version of freenas is this?

 

[Mattia3rd]

FreeNAS-11.3-U5

Thank you

 

[anodos]

FreeNAS-11.3-U5

Thank you

Do you have the "apply owner" box checked in the GUI?

 

[anodos]

PM me the following info:
before change:
getfacl <path to dataset>
after change:
getfacl <path to dataset>
then:
midclt call core.get_jobs | jq
(should be last entry)

 

[Mattia3rd]

Do you have the "apply owner" box checked in the GUI?

In the GUI, when I add a new user from the ACL manager there is only the "apply user" check box..

 

[Mattia3rd]

PM me the following info:
before change:
getfacl <path to dataset>
after change:
getfacl <path to dataset>
then:
midclt call core.get_jobs | jq
(should be last entry)

To follow this step I need to execute again the steps.
I'll add a new user instead, for testing. OK?

 

[anodos]

In the GUI, when I add a new user from the ACL manager there is only the "apply user" check box..

"apply user" in this case means chown the dataset. Uncheck when adding new user to ACL.

 

[Mattia3rd]

To follow this step I need to execute again the steps.
I'll add a new user instead, for testing. OK?

This is my current ACL configuration:

Code:

getfacl /mnt/RaidZ01/Windows/DataFilms/

# file: /mnt/RaidZ01/Windows/DataFilms/
# owner: mattia
# group: nas
group:nas:rwxpDdaARWcCo-:fd-----:allow
group:nasUsers:r-x---a-R-c---:fd-----:allow
user:mattia:rwxpDdaARWcCo-:fd-----:allow
user:emby:r-x---a-R-c---:fd-----:allow
everyone@:--------------:fd-----:allow

I addded a new user "simona" to my dataset in the ACL manager with recursion, like this

This is

Code:

getfacl /mnt/RaidZ01/Windows/DataFilms/

# file: /mnt/RaidZ01/Windows/DataFilms/
# owner: mattia
# group: nas
group:nas:rwxpDdaARWcCo-:fd-----:allow
group:nasUsers:r-x---a-R-c---:fd-----:allow
user:mattia:rwxpDdaARWcCo-:fd-----:allow
user:emby:r-x---a-R-c---:fd-----:allow
user:simona:r-x---a-R-c---:fd-----:allow
everyone@:--------------:fd-----:allow

Show : midclt call core.get_jobs | jq | tail -n 50

"id": 989,
"type": "ALLOW",
"perms": {
"BASIC": "READ"
},
"flags": {
"BASIC": "INHERIT"
}
},
{
"tag": "USER",
"id": 1004,
"type": "ALLOW",
"perms": {
"BASIC": "READ"
},
"flags": {
"BASIC": "INHERIT"
}
}
],
"uid": null,
"gid": null,
"options": {
"recursive": true,
"traverse": false,
"stripacl": false
}
}
],
"logs_path": null,
"logs_excerpt": null,
"progress": {
"percent": 100,
"description": "Finished setting ACL.",
"extra": null
},
"result": null,
"error": null,
"exception": null,
"exc_info": null,
"state": "SUCCESS",
"time_started": {
"$date": 1609961434970
},
"time_finished": {
"$date": 1609961434122
}
}
]

two personal observations:
1. This time nothing changed, I don't know
2. I saw changes like the depicted in this photo for a particular user "emby" used with emby plugin

 

[Mattia3rd]

"apply user" in this case means chown the dataset. Uncheck when adding new user to ACL.

Ok I think that this could be the issue connected to my observations

I'll add more if something would change out of this way