Windows SMB clients do not seem to recognize Dataset group owner Permissions

[DigitalADHD]

Hello,
I am having an issue with a current dataset, so I tried from scratch, and it still does not work.

I have been reading all day on this, can't get it down.

I have followed m0nkey_'s videos as well as other threads advice.


I have the following dataset.
/mnt/tank0/test_win

1. In FreeNAS I have a user named digital
2. This user digital is in a FreeNAS group named "share"
3. The dataset is set to share type windows, everything else is set to default
4. The permissions are set to ACL type Windows
5. I am applying user digital
6. I am applying group "share"

The issue is no users can access the share unless they are in the wheel group.
The user and share group show up in the security tab in windows, but it is like it can't see who is in the "share" group.

I am trying to come up with a shared directory structure based on groups, but I don't want to put everyone in wheel.

Thanks!

 

[anodos]

Post output of "net groupmap list" and "id digital" and "getfacl /mnt/<pool>/<dataset>".

 

[DigitalADHD]

Good morning, and thank you for taking a look.

Code:

Guests (S-1-5-32-546) -> 90000010
wheel (S-1-5-21-4007982421-1512166193-125215997-1012) -> wheel
Administrators (S-1-5-32-544) -> 90000008
share (S-1-5-21-4007982421-1512166193-125215997-1011) -> share
Users (S-1-5-32-545) -> 90000009

Code:

uid=1000(digital) gid=65534(nobody) groups=65534(nobody),0(wheel),8675309(media),1000(digital),1004(share)

Code:

# file: /mnt/tank0/test_win
# owner: digital
# group: share
     user:wife:rwxpDdaARWcCo-:fd-----:allow
            group@:rwxpDdaARWcCo-:fd-----:allow
            owner@:rwxpDdaARWcCo-:fd-----:allow

 

[anodos]

Post output of "getfacl /mnt/tank0"

 

[DigitalADHD]

Code:

# file: /mnt/tank0
# owner: root
# group: wheel
            owner@:rwxpDdaARWcCos:fd-----:allow
            group@:rwxpDdaARWcCos:fd-----:allow
         everyone@:--------------:fd-----:allow

 

[anodos]

Run the following command:
setfacl -m everyone@:rxaRc::allow /mnt/tank0
Your users need a minimum of execute(x) to traverse directories.

 

[DigitalADHD]

Excellent, this seems to have worked, Thank you. So I will test the share structure I have. With digital as the owning user, share as the owning group. Leaving everything e.g. dataset, permissions as windows. I can then get granular at the Windows file share level, i.e. set "share to modify only or a new "share_readonly" as read-only to my dataset? I hope that is clear heh