Register for the iXsystems Community to get an ad-free experience and exclusive discounts in our eBay Store.

Cross Platform File Permissions

Status
Not open for further replies.

mruby

Member
Joined
Nov 2, 2015
Messages
29
I've struggled with this for years now (setting proper cross-platform file permissions so that users can authenticate and properly use files from a mac, windows, or linux OS).

Ive got the following requirements:
* multiple windows machines reading and writing files to a shared drive.
* 1 mac (maybe more in the future), reading and writing from a shared drive
* multiple jails reading and writing from a shared drive

All of my windows user names and passwords are the same, so they authenticate with the share like they should.

On my mac, I "login as" a specific user that i've configured on freenas.

For the plex jails, I've messed a lot with owners and groups a lot to get these to work.

The problem, is when I get one, or sometimes two working, then the other doesn't. All 3 of these are accessing the same files in some cases. I have only smb share setup for the mac / windows to use. I am not using guest account, I want the files to actually be restricted to the proper users.

I know this is possible, because prior to Freenas 11, I had this all running. I made the mistake of upgrading to freenas 11, which completely crapped on all of my jails to the point where none of them worked. So I had to install freenas 9.10 from scratch and import my volumes, setup my users again, etc. I tried my hardest to replicate what I had before, but now i'm left with plex not being able to upload pictures again (I think file permissions), and DVR on plex no longer working (again, file permissions), and now my windows boxes that once were able to save files to shares, are constantly having issues with the share disappearing and the permissions not being consistent, and my mac just flat out can't read / write anything now.

Is there a comprehensive guide somewhere that explains the proper way to do this without using AD, and without just opening up the permissions to everyone?

I've searched around quite a bit and all i can find is a guide the everyone specifically says is a terrible idea in the comments.

Thanks!
 

mruby

Member
Joined
Nov 2, 2015
Messages
29
Thanks for the info. I did watch the first video a few weeks ago, and it didn't prove to solve my problem in any way as it didn't address multiple platform access (unless i'm not reading between the lines on this video), its 100% windows based. Also, there are some differences in my version vs this that i'm unsure of make a difference. Mainly, cifs no longer seems to be an options for my version of freenas.

The second video goes a little deeper in the windows permissions, but again mentions nothing of mac, or giving a jail write access to a dataset.

Is there any additional info that i'm missing here?

Thanks again for the reply!
 

mruby

Member
Joined
Nov 2, 2015
Messages
29
Thanks for the info. I did watch the first video a few weeks ago, and it didn't prove to solve my problem in any way as it didn't address multiple platform access (unless i'm not reading between the lines on this video), its 100% windows based. Also, there are some differences in my version vs this that i'm unsure of make a difference. Mainly, cifs no longer seems to be an options for my version of freenas.

The second video goes a little deeper in the windows permissions, but again mentions nothing of mac, or giving a jail write access to a dataset.

Is there any additional info that i'm missing here?

Thanks again for the reply!
Ok, so I went ahead and went through these instructions despite having no mention of linux, mac, jails etc. turns out it does work. It's extremely confusing you must implement "windows" permissions and manage them in windows explorer to make it work on a mac as well. I have not tested linux yet, but i'm assuming it should be the same assuming I connect to the smb the same way.

As to Jails, I think I got those working again using this: https://forums.freenas.org/index.ph...plugins-write-permissions-to-your-data.27273/

I just created a group with the same guid as the group I assigned to the dataset. I then added the user "plex" to this new local groups in the jail. That seemed to fix it.

Thanks for the info. I totally skipped over your videos a while ago thinking it only applied to windows. It might be good for dummies like me to add a note on there explaining that it will also cover this case where windows and mac users want to access the same share.
 
Status
Not open for further replies.
Top