How to create a smb guest share which is visible fully from every windows and cifs host ? I stuck !

[elkmaster]

Hi,

I tried to setup a smb share which is visible and readable for all users. Independend of unix or windows.
But I always get stuck .... The simplest windows open the network tab. click on the host and i do see the share but cant open the share.
Dont know why. Is there any specific clue to get the windows share working ?

FreeNAS-11.3-U1, No AD, ...

Just want to have share to click and browse. pleeeeeeas

 

[sretalla]

If you share your share and SMB service settings, we can offer some advice on what is not right.

Have you checked the "Allow guest access" box on the share?

 

[elkmaster]

ok sure ... is there a way to get the full config in a piece..
The interesting thing I saw is following:
- I do have two pools, I created a dataset on both and the share on the second worked much better
pool1:

pool2

share

share2

the missing part is in both versions

 

[elkmaster]

something more....
root@txxx[/]# getfacl /mnt/poolz1-1/basepool_1/media
# file: /mnt/poolz1-1/basepool_1/media
# owner: root
# group: wheel
owner@:rwxpDdaARWcCos:fd-----:allow
group@:rwxpDdaARWcCos:fd-----:allow
everyone@:r-x---a-R-c---:fd-----:allow
everyone@:--------------:fd-----:allow
root@txxx[/]# getfacl /mnt/poolz2-1/test
# file: /mnt/poolz2-1/test
# owner: root
# group: wheel
owner@:rwxpDdaARWcCos:fd-----:allow
group@:rwxpDdaARWcCos:fd-----:allow
everyone@:r-x---a-R-c---:fd-----:allow
everyone@:--------------:fd-----:allow
root@turnschuh20[/]#

 

[sretalla]

is there a way to get the full config in a piece

Take screenshots like you did for the shares of the SMB service settings.

 

[elkmaster]

 

[elkmaster]

click on Test share works as expected but media is failing

 

[sretalla]

Maybe see if it's related to the last post on page 3 of this thread:

SMB Windows Domain Users Access Denied after 11.3 Update

@anodos For my part, I have: Reset all the SMB shares to the new defaults (ixnas,streams_xattr) Removed all share aux parameters (except `follow symlinks=yes` and `wide links=yes`) Removed all Samba aux parameters (except `unix extensions=no`) Enabled SMB1 support (for legacy clients) Removed...

www.ixsystems.com

 

[elkmaster]

no... as soon as I set the
username map =
at the smb service
I do net get access to the host at all.

 

[elkmaster]

Even removing both shares. switchoff smb and reenable doesnt change this.. Could it be the case that the information is somehow stored at the pool/dataset itself ?

 

[Yorick]

You can set this in aux parameters of the SMB service, restart the service, and then check /var/logs/samba4/log.smbd when you're trying to access and see what authentication errors you get.

log level = 2 auth_audit:5

Win10, by the way, does not attempt guest access by default, at least I think it doesn't. That's documented at https://support.microsoft.com/en-us...bled-by-default-in-windows-10-and-windows-ser

 

[elkmaster]

Ok the difference seems to be the import time of the pools with 11.2 and one with 11.3 U1
root@txxx[/mnt]# ls -la
total 27
drwxr-xr-x 4 root wheel 192 Mar 19 22:28 .
drwxr-xr-x 20 root wheel 27 Mar 19 22:28 ..
-rw-r--r-- 1 root wheel 5 Mar 12 23:32 md_size
drwxrwx---+ 4 root wheel 5 Feb 2 16:02 poolz1-1
drwxr-xr-x 4 root wheel 4 Mar 17 23:20 poolz2-1
root@txxx[/mnt]# getfacl poolz*
# file: poolz1-1
# owner: root
# group: wheel
owner@:rwxpDdaARWcCos:fd-----:allow
group@:rwxpDdaARWcCos:fd-----:allow
everyone@:--------------:fd-----:allow

# file: poolz2-1
# owner: root
# group: wheel
owner@:rwxp--aARWcCos:-------:allow
group@:r-x---a-R-c--s:-------:allow
everyone@:r-x---a-R-c--s:-------:allow

Can I just reset the ACLs for the pools ? or full delete the ACLs an keep the pure unix access rights for the pools

 

[elkmaster]

So finally I did
getfacl /mnt/poolz2-1 | setfacl -b -n -M - /mnt/poolz1-1
this solved my issue for the moment