TrueNAS Core 12 User and Group ACL Permissions and SMB Sharing

[@ZaPirate]

even now, 3 years later, this video helped me fix the permissions in truenas. Appreciate everything you do.

[@ericknaak6572]

same

[@deepaknanda1113]

Same here.

[@oldshield]

same here as of today

[@chemicle]

Thanks so much Tom, I realize the video is a bit older, but man you just make it all so easy. Thanks a bunch. Definitely my go to and recommended YT tech guru. Cheers my man.

[@timritchey1071]

Tom, Your my "Go To" guy for when I set up a new TrueNAS system in my HomeLab. I'm a visual learner and YOU can be paused. : 0 ) Appreciate your videos and education style. Keep it up.

[@christopherrajaratnam3013]

man appreciate this guy, all the way from my first true nas 10.1 till 13.0 he been there every step

[@Munkie]

Tysm. Was having issues accessing the folder within the file explorer but after following your tutorial I managed to gain access to it.

[@spudforyou4124]

Thank you! I tried to use Truenas instructions online but couldn't access thru my pc. Followed your instructions to a T and I was in. I understand there is alot more to this but for just me this tutorial was perfect.

[@crowe117]

I really appreciate this video, man. This is the first tutorial I've found where you actually take the time to explain how this works instead of doing rapid fire like you're bored with the whole ordeal.

[@Broncoman-lk2zn]

I just upgraded and changed out some hardware. I could not get back to the previous network permissions. This video saved my evening! Thank you!

[@arniespace]

Ha Ha, I watched this before setting up Truenas core for the first time. I was reading about this in the TNC manual, but it is more clear now, thanks.

[@MarkDuivesteijn]

Thanks for the clear explanation, I'm new to truenas and I never worked with ACL so this video was very helpful.

[@antoniovargas3969]

You da man Lawrence! I had trouble with my SMB shares and stripping the ACL fixed the issue. Love your videos. I learn a lot from them.

[@AlexandruFlorinSerban]

Many thanks for the info you provide for free! So much appreciated 🙌🏻

[@hans3668]

ngl with this video I got my whole work folder back. THANKS

[@TrueNAS]

Another great video, Tom! The #TrueNAS Community thanks you for your tutorials!

[@LAWRENCESYSTEMS]

My pleasure!

[@TheRicosauve]

@FreeNAS and TrueNAS...how do you prevent a user from "seeing" a file/share when they do not have access/permissions to it. Example. User A only has access to Engineering, User B only has access to Production, User C has access to both. User A would ONLY see the Engineering folder and User B would ONLY see the Production folder but User C would see both.

[@Franchyze923]

Thank you!! This fixed my issue I was having after upgrading.

[@Joel-xf9tl]

Perfect. Explained so clearly. Saved me from uninstalling! Kudos!

[@bilallandreaselkurdi3300]

Thank you very much for this video. It helped me a lot. Best regards from germany

[@mcgarnacle21]

This was extremely helpful in getting me up and running. Thank you so much.

[@billsemmendinger2592]

Thanks, Like others have said I was stuck and didn't quite understand how to set permissions. Great video!

[@carphotography1017]

Awesome video. Been with Synology for a while but wanted learn TrueNAS purely for its flexibility.

[@terrysimons]

The reason root/wheel doesn't work in FreeNAS 12 is because the wheel group doesn't have permissions for SMB authentication. If you show hidden groups and inspect the wheel group in the UI, you'll see that "Samba Authentication" is set to false. It doesn't seem possible to change this in the UI. I have verified that leaving the user root, but changing the group to a group that has "Samba Authentication: true" does work.

[@DeetexSeraphine]

This has helped me, thank you for sharing this.

[@orlandomarinjr]

This was great thanks! I was lost hadn't set it up since version 10.

[@mkdahan]

Amazing how one video can help a lot!!!

[@Engineria]

Brilliant video, very clear and well explained. Thank you!

[@Shazman30]

Super helpful. I managed to not lose my datasets as the main USB drive with the boot OS failed and I reloaded it on another.

[@subman719]

It is recommended to not use USB drives for the OS because they can’t handle heavy workloads of OS’s. Your best bet is an SSD drive. I run dual SSD drives mirrored just to prevent an OS failure. I run enterprise grade SATA drives for my data.

[@kozureokami8374]

This is really helpful. Thank you!

[@imthateddie]

Super helpful video. I learned so much. Thanks!

[@eikeimnetz]

Thanks so much for the many great explanations.

[@capkenway]

Thank you. I was stuck on new permission and this helped alot

[@TheRicosauve]

Agreed...a fantastic video as usual!

[@MichaelRGlatfelterJr]

Thank you so much, I was having so much trouble with this very problem. I was able to fix this problem.

[@aimpizza6823]

finally understood it, thank you

[@korvenwin]

Good video but could you do it for SCALE too? I can't get to understand how SCALE ACL works. Thank you for your great work.

[@ColaCal]

Thanks man great video

[@86supraguy]

Thank you so much for this video, I between this and figuring out how to import a pool. I was able to restore my data after resetting my configuration.

[@alebehindthecamera]

This video helped me a bunch

[@multeemedia]

I struggled with this back in Freenas version 9 even...However; I figured out, you can actually use the Windows Permissions Dialog to add/change/remove user permissions. Use this format when asking to change group/user permissions. ipaddress\username When it prompts for the admin credentials use whoever has full control of that share in the same format as above.

[@aghinesah]

Thank you for the video as it was helpful learning ACls and shares; however I am still having issue connecting with my windows PC. I have recreated the data sets and shares as well as stopped and restarted the SMB services but still no connection. ALl worked with version 11.2 but when I upgraded to 12.0 that is when everything broke. Any help you can provide would be so appreciated.

[@tyoung9012]

Can I suggest making sure the user account you are accessing from your PC is added in the ACL for the SMB? This tutorial focuses on ACL for datasets, not the SMB ACL

[@alomar.]

Brilliant Brilliant video Thank you so much

[@LAWRENCESYSTEMS]

Glad you enjoyed it

[@milan_2k45]

I should have watch this 16mins video first before I went in the rabbit hole

[@BobBeatski71]

Thanks Lawrence. I'm an upgrade, rather then re-install user, and this problem has been bugging me for a couple of weeks now. Couldn't remember what I did those 2yrs ago to set things up. Don't know why things suddenly changed. Perhaps part of the upgrade process?

[@concept_la]

Best explanation thank you

[@kiaser21]

For Truenas SCALE, this won't work. Something broke recently after the release on Truenas SCALE. SMB just isn't functional. All permissions set seem to be fully ignored, even on newly create datasets and shares. And this isn't just the issue from guest access being removed from a recent Windows Update, nor credential issues within Windows. The only workaround I've found is to use chmod from a shell to give full access to all, but that is hardly ideal.

[@josephmurphy15]

Thank you so much. helped tons

[@MirceaPrunaru]

Thanks man. Hope they make the process easy for noobs like me in the future =-))

[@gunchag]

What is the main difference between linux style permission and acl permission manager? I was using old FreNAS 9.2.x.x version and used linux style permissions but now I'm confused witch style of permission manager to use with new TrueNAS Core.

[@BFArch0n]

My issue is with a sub dataset, created an SMB share for it, and can't access it at all, only when I go through the parent dataset to the sub folder, but can't access the SMB share of the dataset directly. :(

[@erikwagen1480]

Thanks for another great video!

[@srvtx]

Great video. Thank you.

[@kieranwilliams3052]

Thanks so much ! I was ready to pull my hair out and was a simple mistake i made. Can you show how to have a AD security group applied . My NAS is already joined and replicating changes to ACL domain list but I’m struggling to work out AD ACL for TrueNas.

[@ricomilland8654]

Thanks for this video Tom,. i am trying to wrap my head around why the dataset permission/owner is set to a regular user with a login? what if that user in the future don't need the access or left the company, wouldn't it make more sense to create a "storage" specific "system" user without a login and a group to own all the files dataset, and then set all users auxiliary group to that group?

[@LAWRENCESYSTEMS]

You could do that, but this is targeted mostly for home users. Most businesses use Active Directory handle the permissions.

[@pabss3193]

Any ideas about how to create AD User personal network drives with a set space of let's say 5 GB per user and proper permissions? Thanks for the awesome videos by the way

[@ralmslb]

In general, I find the SMB shared permissions in TrueNAS Core a massive mess and pain in the ass. I use TrueNAS for a few years and still, this topic is very painful as an home user, specially considering that some groups show in Share ACLs but not in normal ACLs and vise versa, total mess.

[@kubanishku]

I've encountered a strange (to me) behavior in Win10. I attempted to connect like you did, but I double clicked "TrueNAS" in the Network view on windows. But my defined user/pass would NOT be accepted. However when I went against the IP of the box, I was able to connect no problem. Not sure if windows is prefixing the username or something via the Network view. Any ideas what this could be?

[@mrteausaable]

I created new user and group and followed your instruction video step by step still window does not allow me to access using the map network drive. I can see the folder but not access when prompt different credentials. Drive me crazy to able to access the files from window. How does window knows what user you are when open network drive at TrueNAS? I check the getfacl and the owner permission is correct but when I mapped network drive, I use the same owner credential I get error.

[@dilbertwave646]

depending on your setup, you may need to add the host name before the username in the password dialog on windows, eg "TRUENASHOST\username" W10, esp with azure/ad can be troublesome with network shares lol

[@mrteausaable]

@@dilbertwave646 Tried that not working. Now, the Windows error is "The network folder specified is currently using a different user name and password. To connect using different user name and password, first disconnect any existing mapping.." I did disconnect on the windows explorer that I can see. Still same issue.

[@mrteausaable]

I managed to delete all unsuccessful map drive using cmd net use. Now back to Window cannot access \\192.168.1.20\youtubefolder\.. You do not have permission to access...

[@dilbertwave646]

@@mrteausaable Do like he show's in the vid on truenas, create a user/pass and a group, set the ACL to restricted, add your user and group to the ACL with r/w permissions. On your windows box, connect to the share. When it prompts for credentials, click other credentials, in the user box put "YourNASHostname\UserCreatedonNAS" and then put in the password. Also make sure network discovery and file/print sharing are turned on for the network in windows

[@mrteausaable]

@@dilbertwave646 No luck sir. I still get window cannot access \\truenas\testfolder. You do not have permission to access.." message. I tried different pc on the network same error. I can mapped to different network pc just fine but not TrueNAS. I use FreeNAS and it works fine.

[@dannythomas7902]

Thanks for being knowledgeable, most are just slinging their mouth!! STRIP ACLS AND SET DAUGHTER TO GRANDSON GOOD OPTION

[@goldibollocks]

Is this different in Scale? I followed the guide completely but when typing the IP of the server in the Windows Explorer and then my user credentials, it always says "wrong username or password" even though I checked (with the eye icon to show the password in plain text) repeatedly and even re-created the user on the TrueNAS. I'm not sure if this is even working correctly in Scale at all since there are also some problems before getting to this point: 1. When setting the ACLs, TrueNAS will never save changes to owner and group from the ACL dialogue. Owner and group can ONLY be changed if you use the regular permissions (non-ACL) dialogue and then switch to ACLs. If you want to change owner and group again, you have to strip everything, set the new o/g in the regular permissions dialogue and then switch to ACL again. 2. When selecting the dataset in the SMB share dialogue, it does not show the blue batch that says "ACL" behind the name of the dataset. Really weird behavior on my Scale 22.12.2

[@GodisGreater01]

If you want to share a folder over public IP so some someone else can access the folder somewhere else. How would you set that up?

[@237311]

Helpful video. Lots of plugins are missing compared with Freeenas. How can i install them manually?

[@sag2987]

Wow, your video was the most in-depth of any that I found on how to set up TrueNas on an old PC. I believe I have set up TrueNas to work for my application. However, being that I am over my head on this stuff, I apparently wasn't aware that I also need separate software to use for storing my security camera's motion detected videos. I am trying to use TrueNas on a spare PC to capture and store security camera video because the only storage is an SD card on the camera and I'm concerned about someone stealing the camera and thus the stored video. The security camera does offer a paid monthly subscription to have the videos stored in the cloud, but I don't trust this plus I'm not interested in having to pay to store the videos. I was told in a chat that a very popular open-source TrueNAS plugin is Zoneminder. Do I need this to have the videos stored in my TrueNas shared folder? I thought that setting up this NAS would automatically send the files to the NAS folder. I went to the Zoneminder site, but I had no idea how to use this, or whether I am supposed to install it on the old computer, my regular PC, or what? In addition, it wanted me to pick the operating system I will be using. I have no idea what Operating system the old PC is using since it is booted with a USB stick that has TrueNas on it. As you can tell, my head is spinning. Any help you can give this old senior citizen in setting this NAS up correctly is appreciated.

[@PolSenserrich]

Hi @Lawrence ,just one thing. I'm using Truenas to backup data from a cloud web hosting with PLESK, and another folder to share personal files. I want FULL permissions from local PC to all those folders. Do you think I should use ACL for both folders? Without ACL, from plesk everything is running great but I have some problems with permissions accessing those folders from windows.

[@LAWRENCESYSTEMS]

You can use ACL as long as you set them up properly.

[@aaronlagomarsino7980]

dumb question, I noticed when you created tom & marcus you also created a group with their name then moved the users into the LTS group but left their initial user groups present. Are there any issues with making the LTS group first then when you create tom and marcus placing them in the LTS group during the creation? will this cause any issues?

[@LAWRENCESYSTEMS]

It should still work.

[@ystebadvonschlegel3295]

I'm still a bit confused as to the default TrueNAS permissions vs "ACLs". Why would one use ACL vs the default permissions? Is it just to add more than one owner/group access?

[@LAWRENCESYSTEMS]

ACL's offer more advanced options that you can get with the UNIX style permissions.

[@Begin2013]

Hello, will you benchmark TrueNAS CORE? Some of us have 3x slower speed copying big files not in ZFS cache, compared to FreeNAS.

[@LittleBear85]

Thank you Tom. I messed up my ACL and the strip option and your instructions got me back to accessing my files on my pc. Also TrueNAS Scale is slightly different with naming and directories vs core if it is possible or worth your time to update that would be great.

[@hematogen50g]

Is there anything similar on xigmanas? ACL settings on xigmanas don`t do anything at all. Tried different combinations of settings of ACL modes but nothing changes.

[@damienralentass7551]

I like the simple explanation, expect you when I little too fast on login with marcus and copying some files. I tried to replicate what you did,, but I lost you. Thanks

[@dav3n0m82]

Awesome content. Though I am having issues where I have 2 truenas builds. Server 1 smb is no longer present on local comp. And server 2 is still visible and accessible. They both have the same permissions. Help?

[@mrteausaable]

I reinstall TrueNAS couple times. Follow your examples with tom username and group. I am unable to access via windows (8:40 min of this video), I received Windows cannot access \\.... You do not have permission to access.... Any idea what I did wrong? Test on second PC the same windows Network Error.

[@mrteausaable]

I got TrueNAS forum help and get it fixed. The problem is I imported pool from FreeNAS pool. FreeNAS pool does not have permission for everyone..

[@albertcamposmerola9777]

@@mrteausaable Could you post a link to the forum for solution? I'm having the same issue

[@mrteausaable]

@@albertcamposmerola9777 I already did. Follow this thread www.truenas.com/community/threads/new-truenas-install-create-1-new-user-and-smb-share-but-unable-to-access-from-windows-10.88953/. Hope it helps.

[@ItsQuintFX]

@@mrteausaable Whoever you are, thank you! You saved me from pulling an all nighter hahaha

[@bassmaschine]

Why not use root an wheel? What is the pratical difference between adding my user to wheel group or adding my user per acl?

[@mmarino42568]

How do I set it so that my Datasets show underneath my pool in the Storage window ?

[@Maisonier]

After 2 years ... there is much difference with Truenas Scale for this configuration? thank you.

[@Glatze603]

Very good explained, thank you! Where do you save your docker volumes? I think it is ab bit complicate trying to save docker-volumes directly to smb-shares because some docker images want to change owner and permissions (for example guacamole). How do you handle this? Thanks 👍

[@hajres93]

That is useful. thank you

[@One_Guy]

thanks for the help :)

[@JackLOJBond]

When I use the IP address, everything seems fine. However, when I try and use \\[NAME OF SERVER], the permission get messed up and can only see files and folders that I have created and not the other user in my group. Any ideas?

[@androidphone3165]

Any idea how I setup FTP in addition to SMB. I added my user to the dataset and added them to the ftp group. And did some testing. Not sure how this new TrueNAS setup should be configured.

[@LAWRENCESYSTEMS]

I have not had to use FTP in over 10 years, not something I have tested as it's an old insecure protocol.

[@BrianBerginTuba]

I need to do this with AD groups & accounts, but any time I try to use something like Group = AD\Domain Admins I get "Error: [dacl] Item#0 is not valid per list types: [id] Not an integer". Other "solutions" I've found online don't resolve this. This is TrueNAS-13.0-U5.1 CORE. Anyone have any ideas? Tom, could you do a video on AD ACLs?

[@ThoughtForum]

Do you need Windows Pro for this? Doesn't seem to work on Home edition, getting Permission Denied error when trying to connect. Group/User have ownership of share.

[@LAWRENCESYSTEMS]

No , pro is not required

[@stephanc7192]

Great video

[@Mikul107]

Hi i have issue with connect TrueNAS to AD controller after restart. I merge TN and AD, set share, all was correctly. But then i restarted TrueNAS and after restart i lose connection with DC, SMB service can't start. In log i got error about "Winbind daemon is not available". Of course process is stopped and can't turn ON SMB service. I can't start service . Re-join to domain resolved my issue. Any suggest?

[@kennethnicklowicz6844]

Can I delete the old dataset and make a new one without loosing the existing data? I just ran into this on mine.. been running for 7 years. Also I can only access mine with IP the DNS name no longer works is that by design?

[@HubesTube]

It doesnt work for me on scale. Its such a frustrating piece of software... "This may be fixed by granting the aforementioned user execute permissions on the path" is from hell. I did NOTHING and from today on basically I cant access my folder anymore - how can this be?

[@Gh7TModRt]

Пул данных и права доступа по домену получилось создать, но при локальном доступе все имена пулов в нижнем регистре, кто нибудь сталкивался с подобным? значения - premisions - не влияют... все настройки как на видео.. но заглавные буквы всё равно в нижнем регистре. вот уже грешу на локализацию, переключена в ru

[@jamesc2327]

so frustrating, i followed this to the exact steps, still can't access the folder, cant even see any shares at all :(

[@ffiit5864]

I'm having a problem with propagating newly created datasets... I've deleted old pools but I can still see it.

[@derekteetv]

Is there any reason on earth ACL would screw up SSH public key authentication? I've been going absolutely nuts on this. Usually it's so easy, .ssh folder with 700 permission and authorized_keys with 600. But this danged thing will NOT skip the password prompt.

[@BrunoVera]

Thank you! your video was very helpfull!

[@lostevesy]

You already had a user created, what settings are required in the user?

[@DJRhinofart]

Do you have, or know of a good video for using AD integration? Or, would it work to have the shares setup so that a particular user (An Admin for example) has full control of the share / folders, and then use Windows to set the permissions? Would those permissions 'transfer' over to the TrueNAS interface? Does the TrueNAS interface read the permissions live from the file and folder permissions?

[@LAWRENCESYSTEMS]

I don't have a video on it, but TrueNAS does support AD integration and they have documentation on their site.

[@DJRhinofart]

@@LAWRENCESYSTEMS I managed to muddle my way through it, and have my AD fully integrated with my TrueNAS Core install. AD user Home directories auto create and map to the users, and I'm able to maintain emergency administrator access to the directories as needed. It's good for a small org / home lab, but I wouldn't want to do this at scale..... (no pun intended)

[@juanmaclik5391]

Hello how are you excellent video greetings from Argentina first of all, I wanted to ask how I can do the following create two directory directory1 and this directory I gave the group: 1 user: 1 then create directory 2 and assign group: 2 and user: 1 to this but entering windows group 1 and user 1 sees all directory 2 and I was able to make modifications and others, how can I make it so that only user 1 and group 1 only see their directory, which would be 1, thanks.-

[@craighocking2042]

Well hope i can glean some help, can connect via Windows 10 and can access shares, Windows 11 can ping the IP but can not open the share.

[@IslamforLifeTv]

hey dear, i want to stop past like .exe or etc extension file on TrueNas SMB Share

[@a2940uw]

Great video, can make more video to show how to create samba folder to share to particular users group only

[@joephillips6634]

If I create a new dataset, can I have it include data that was already existing on the drive beforehand?

[@LAWRENCESYSTEMS]

Each new dataset will not have data until you put data into it.

[@InversionesAlfadan]

Hi. How can i do add a freenas to zentyal's domain controller?

[@EduardoJGG2002]

Gracias!

[@wildmanjeff42]

Thanks for the video, perfext timing--I upgraded to Truenas 12 and added a new Volume and could not get the ACL permissions right, I know I could get it eventually, but your videos really help--

[@testtesting7740]

Great video. And thanks much. In terms of stripping ACLs, how do we strip acls from the whole pool? Still having issue with accessing data set from either Linux or Windows based system. I can see the shared datasets, however I am not able to go past the first folder without getting a second prompt to authenticate the user. But, even after inputting the right credentials, it says incorrect login/pass.

[@LAWRENCESYSTEMS]

ACL's are assigned to datasets so that is where you remove or apply them.