SMB Windows shares open to every user/ no password prompt

temp_temp

Cadet
Joined
May 24, 2019
Messages
4
Hi there, please pretty please ;)
Windows 10, Freenas 11.2 (fresh download)

No matter how many users and groups I create, the first user I login with has access to all of the datasets and shares of the other users.

All I want is user1 -> dataset1 -> share1 -> login+password
user2 -> dataset2 -> share2-> login+password

How can I get this to work?
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,543
Hi there, please pretty please ;)
Windows 10, Freenas 11.2 (fresh download)

No matter how many users and groups I create, the first user I login with has access to all of the datasets and shares of the other users.

All I want is user1 -> dataset1 -> share1 -> login+password
user2 -> dataset2 -> share2-> login+password

How can I get this to work?
Edit the ACLs on the share to do that.
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,543
By ACL You mean the Windows security permissions? The 'Everyone' group?

Any reasons this is added by default?
Thanks

The expectation is that the server admin will fine-tune permissions as needed. FreeNAS 11.3 will add a graphical ACL manager and the defaults will be slightly different (no 'everyone' entry).
 

andnet

Cadet
Joined
Jul 27, 2023
Messages
4
I just found this ancient thread, as I have the exact same issue with the latest stable release.
It is either: Everyone has full access, or nobody has access at all.
No combination of permissions establishes access for a certain group only.
@temp_temp: Did you get it up and running for your case? Would you be able to share screenshots of your solution?

Thank you :smile:
 

ddidd

Cadet
Joined
Jul 31, 2023
Messages
9
I just found this ancient thread, as I have the exact same issue with the latest stable release.
It is either: Everyone has full access, or nobody has access at all.
No combination of permissions establishes access for a certain group only.
@temp_temp: Did you get it up and running for your case? Would you be able to share screenshots of your solution?

Thank you :smile:
I seem to have the same issue...despite of dataset/file system ACL configuration, everyuser has access to every dataset/SMB share.
midclt call smb.status AUTH_LOG logged empty client account for successful authentication
 
Joined
Jul 3, 2015
Messages
926
Can you share a screenshot of your dataset permissions please?
 

ddidd

Cadet
Joined
Jul 31, 2023
Messages
9
Can you share a screenshot of your dataset permissions please?
I think my issue has been fixed. I accidently deleted user primary group and both users have become part of build-in user group, hence why access was granted.
 
Top