I've done the following
created a dataset in a pool
created a group for users who will have access to the dataset (and added users to that group)
set permissions of the dataset to point to the group
created an SMB share
in Auxiliary Parameters, set "access based share enum=yes"
in Shell, set "sharesec "Media" -r S-1-1-0:ALLOWED/0x0/FULL" to remove full access for all users (so everyone doesn't see the share)
in Shell, set "sharesec "Media" -a S-1-5-21-3304246306-2936721670-1852261437-1020:ALLOWED/0/FULL" to add access for necessary users to see the share based on the group ID for the group created above
Users can authenticate to the server and everything works well (as far as the user only seeing shares that they should have access to), but when they try to open a share, they get a message "You do not have permission to access \\serveraddress\Media"
I'm stumped because they do have permission via membership in the group that does have access to the share(s).
Does anyone know if there is something else I should do after the sharesec commands?
(using FreeNAS-11.2-U3)
created a dataset in a pool
created a group for users who will have access to the dataset (and added users to that group)
set permissions of the dataset to point to the group
created an SMB share
in Auxiliary Parameters, set "access based share enum=yes"
in Shell, set "sharesec "Media" -r S-1-1-0:ALLOWED/0x0/FULL" to remove full access for all users (so everyone doesn't see the share)
in Shell, set "sharesec "Media" -a S-1-5-21-3304246306-2936721670-1852261437-1020:ALLOWED/0/FULL" to add access for necessary users to see the share based on the group ID for the group created above
Users can authenticate to the server and everything works well (as far as the user only seeing shares that they should have access to), but when they try to open a share, they get a message "You do not have permission to access \\serveraddress\Media"
I'm stumped because they do have permission via membership in the group that does have access to the share(s).
Does anyone know if there is something else I should do after the sharesec commands?
(using FreeNAS-11.2-U3)