SMB no access. you do not have permission

[Andrej47]

My co-worker was creating a new share; somehow after she saved it, everyone lost connection to all the shares that existed before.

when we try to connect from the mac we get an error "There was a problem connecting to access this server" You do not have permission to access this server"

I added a new group, new user, new share and still got the same error.

 

[anodos]

My co-worker was creating a new share; somehow after she saved it, everyone lost connection to all the shares that existed before.

when we try to connect from the mac we get an error "There was a problem connecting to access this server" You do not have permission to access this server"

I added a new group, new user, new share and still got the same error.

What version of FreeNAS?

 

[Andrej47]

FreeNAS-11.2-U6
(Build Date: Sep 17, 2019 0:16)

 

[Andrej47]

I just tried afp with a brand new user/group/share and still could not connect

 

[anodos]

I just tried afp with a brand new user/group/share and still could not connect

Most likely your co-worker cut off permissions for all users at a common path (possibly the pool itself). What's the output of "getfacl /mnt/tank"? (assuming tank is the name of your pool).

 

[Andrej47]

maybe

Most likely your co-worker cut off permissions for all users at a common path (possibly the pool itself). What's the output of "getfacl /mnt/tank"? (assuming tank is the name of your pool).

i used the command shell on the NAS, and typed getfacl /mnt/PoolA

i got a reply stat () failed: No such file or directory

 

[anodos]

maybe



i used the command shell on the NAS, and typed getfacl /mnt/PoolA

i got a reply stat () failed: No such file or directory

Try starting with "zfs list" make sure that your pool / dataset is there.

 

[Andrej47]

yes,

Try starting with "zfs list" make sure that your pool / dataset is there.

yes, its there, got a long list with all the pools and data set

 

[anodos]

yes,



yes, its there, got a long list with all the pools and data set

Run "mount | grep PoolA" and make sure the pool is mounted properly.

 

[Andrej47]

ok, must of done something wrong the first time..here us the output

 

[Andrej47]

ok..here was output

 

[anodos]

Looks like the colleague had "apply default permissions" checked when creating the SMB pointing to /mnt/PoolA. You might be able to restore access by running the command setfacl -m everyone@:rxaRc:fd:allow /mnt/PoolA, but if permissions were set recursively, then you will probably a big job ahead fixing them.

 

[anodos]

What is the ACL on PoolA/Audio?

 

[Andrej47]

What is the ACL on PoolA/Audio?

Audio was the one she was trying to create.

Where do i check the ACL for that??

 

[anodos]

In that case, perhaps check getfacl /mnt/PoolA/Broadcast.

 

[Andrej47]

In that case, perhaps check getfacl /mnt/PoolA/Broadcast.

 

[anodos]

You can verify my hypothesis if you haven't rebooted since the issue started by running the command midclt call core.get_jobs | jq | less in an SSH session. This will allow you to scroll through the list of middleware jobs that have been run using arrow keys. You're looking for one called "apply_default_perms". It should also include the path passed into it.

 

[anodos]

Did the "setfacl" command I gave earlier sort things out?

 

[Andrej47]

Did the "setfacl" command I gave earlier sort things out?

i didnt try that yet..i was about to try to putty in and do your last post

 

[Andrej47]

You can verify my hypothesis if you haven't rebooted since the issue started by running the command midclt call core.get_jobs | jq | less in an SSH session. This will allow you to scroll through the list of middleware jobs that have been run using arrow keys. You're looking for one called "apply_default_perms". It should also include the path passed into it.

im trying to ssh in on port 22..not letting me in