Hello:
I am trying to setup remote storage for my family members. I've setup SFTP in Freenas and all is working ok except that I am unable to control witch folders or directories users have access to. I've setup user accounts under groups "guest" and "Admin". For example:
user: jsmith is under the "guest" group and has a path set to /mnt/MyNas/Guest/, when jsmith logs in the directory immediately goes to /Guest/ but he can simply choose to look into /MyNas/. If i change the path to /mnt/Guest/ or /Guest/, when jsmith logs in he is immediately directed to the Guest directory but cannot do anything with it.
Can someone please help me understand how to set user and group permissions and folder access in Freenas? Thank you.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Hi thebradnetwork:
Yes I have a copy of the uses manual. The manual does not seem to have direction on how to set stricked permissions. For example: I've set the permissions for a user, let's say "jsmith", under the guest group. I set his user directory to /mnt/MyNas/jsmith/. When jsmith logs in, the initial directory opens but there is nothing stopping the user from just clicking on other folders/directory to view their contents.
Congratulations flintstonephilly on answering your question.
If not awarding points to someone for assisting would you please post what you DID find/figure-out so the rest of us might benefit from it. I too have have cut my teeth on NOSs like Netware and broken-Windows and do NOT like the idea of unsecured file systems. I also do not want to wait on the next release of FreeNAS (touted to better support Group ACL assignment).
Thanks!
<<Admin>>
If a solution &/or links are to be posted by the author great. I'd like to keep this thread open long enough to allow for this to happen.
flintstonephilly, if you're not intending to do this please let us know.
I was needing this also, we finally got it worked out today so I wanted to share with you guys.
Provided you have installed Freenas and configured your drives, created a mnt point and are ready to create directories and shares.
Step 1:
Under Services and cifs/smb enable SAMBA and set authentication to "local user". Set Netbios name for example "fileserver" (this is what windows will access ... i.e. start run \\fileserver)
Then set your workgroup and that is it, save and restart.
Step 2:
SSH to your box to your /mnt/share/ directory ... "fileserver" Create your directories with the mkdir command "mkdir public" "mkdir accounting" "mkdir rick" and then you need to change the permissions "chmod 777 public" "chmod 770 accounting" "chmod 700 rick" Then change group "chgrp public public" "chgrp accounting accounting" and so on. In this example public is open to all to read write and execute, accounting is open to anyone in the accounting group to read write and execute but no one else, and rick is only open to rick.
You can type ls -l and see a list of these directories and they
should show "permissions, owner, group date and name of directory" like this...
drwxrwxrwx 2 root public 512 Mar 22 18:06 public
The example shows permission 777, owner root, group public, date, and directory name.
Step 3
Back in freenas, go to access and users and groups. Go to group tab and set up group for accounting and any other groups you need. Public is not needed as it is set to 777 Now switch over to users and create users and set primary group like accounting, set additional groups for this user (can be multiple) set home directory to /mnt/fileserver or netbios name.
Step 4
Back to service under cifs/smb go to the shares tab and setup shares for all directories you made, assign same name as directory you created, path to that directory for example (/mnt/fileserver/accountin
"valid user = @accounting" on separate lines, and do not forget to save.
You now will be able to access under windows by the
"start run \\fileserver" command and have a working user and group structure.
Hope this is helpful,
Rick
Business Accounts
Answer for Membership
by: thebradnetworkPosted on 2008-12-18 at 17:05:54ID: 23209424
Have you looked at this:
http://www.freenas.org/ind