Unable to connect to SMB share in windows - no permissions

[daveegreene01]

I'm trying to set up shares for the first time. The annoying thing is, it was working fine so I have messed something up and can't get it back. I initially had 11.2-U7 installed and a dataset and SMB share for windows. I can see the share in windows and map it as a network drive but when I attempt to open it i get a message saying I don't have permission. Opening the properties and clicking the security tab, there are no ACL details, just a message saying 'You must have read permissions to read the properties of this object'. This is the same from any of my PCs. In the hope that it might help, I have upgraded to 11.3 and set the ACL information there but the problem is still the same. I have attached the settings. I just can't see what I am doing wrong. Any help would be great..

 

[KrisBee]

Which account credentials are you using in Windows to connect to the FreeNAS share and does a matching account exist on FreeNAS which is a member of your "shared group"?

Your ACL on the dataset "/mnt/NAS01/shared" is restrictiing access to Windows user accounts that are part of the "shared group" in FreeNAS

 

[daveegreene01]

Which account credentials are you using in Windows to connect to the FreeNAS share and does a matching account exist on FreeNAS which is a member of your "shared group"?

Your ACL on the dataset "/mnt/NAS01/shared" is restrictiing access to Windows user accounts that are part of the "shared group" in FreeNAS

Yes, the "shared group" has two users as members, one of which is matching my Windows account and the second matches my wife's. The FreeNAS user details are the same as I use for Windows login.

 

[KrisBee]

When you map the network drive in Windows are you prompted for network credentials? Post the output of this FreeNAS shell command: getfacl /mnt/NAS01/shared

 

[daveegreene01]

When you map the network drive in Windows are you prompted for network credentials? Post the output of this FreeNAS shell command: getfacl /mnt/NAS01/shared

No, I am able to map the network drive without challenge but then when I click on it to access I get the 'Windows cannot access..' message.

Output from command:-

 

[anodos]

When you map the drive, what's the output of "smbstatus"? (Assuming that you map successfully)

 

[daveegreene01]

 

[anodos]

What's the output of id Dave?

 

[daveegreene01]

What's the output of id Dave?

 

[anodos]

What's the output of getfacl /mnt/NAS01 and net groupmap list?

 

[daveegreene01]

What's the output of getfacl /mnt/NAS01 and net groupmap list?

 

[anodos]

Okay. The problem is the ACL on /mnt/NAS01.
setfacl -m everyone@:rxaRc::allow /mnt/NAS01

 

[daveegreene01]

Okay. The problem is the ACL on /mnt/NAS01.
setfacl -m everyone@:rxaRc::allow /mnt/NAS01

Thank you anados! Brilliant! I have spent two days deleting things and putting them back only to have the same problem. Its a steep learning curve for someone like me with no previous experience.

 

[anodos]

Thank you anados! Brilliant! I have spent two days deleting things and putting them back only to have the same problem. Its a steep learning curve for someone like me with no previous experience.

It looks like you made an ACL change in 11.2 that we no longer allow in 11.3 because of the debugging issues it can cause for normal users.

 

[daveegreene01]

That would make sense. Thanks for the assistance :)