Unable to edit/fix permissions

[rtm5005]

Hi Everyone,

I have had a FreeNAS/TrusNAS box that I have been running for at least 8 years now with many updates and in-place updates along the way. I have never done anything too complex with it. I just wanted some redundant storage with an SMB share for my computers to have a common place for data.

I have had some weird permissions issues lately and I have tried resetting user passwords to get the proper read and write permission for a folder but had no luck. I started looking at the File System ACLs to see what is going on and I have an error that I don't know much about and cannot find anything related to my specific issue and I think it is preventing me from fixing the access to the folder I need.

Please see the screenshot for details as I cannot update any permissions on this Share. I think it is related to not finding a group name for the group ID which I feel is something built-in and I cannot delete this or edit anything as the error below is then presented.

Thank you for your help.

 

[Samuel Tai]

You can't change permissions or ACLs for the root dataset in your pool.

 

[rtm5005]

I definitely do not understand what I am doing in the new UI then as I am accessing this correct way then as I am selecting edit File System ACL from the Windows Shares (SMB) location in the left navigation menu.

Any suggestion on how to help me to view these specific ACLs on the directories in this Share?

 

[Samuel Tai]

In the Shell, try ls -l /mnt/Vol01 first. On my system, the permissions should look like:

drwxr-xr-x 9 root wheel 9 Jan 30 2021 /mnt/Vol01/

If you see a + at the end of the permission bits, then there's an ACL applied where there shouldn't. To remove the ACL recursively, run find /mnt/Vol01 -exec setfacl -b {} \;.

 

[rtm5005]

I saw the + at the end of the permission bits and ran the command you suggested.

I ended up with the following results.

 

[Samuel Tai]

That just means those particular files didn't have the +. Your ACLs should now be gone, and you can start over.

 

[rtm5005]

Thought it was going to work until I went to apply an open preset ACL to the SMB Share and I got this error again.

 

[Samuel Tai]

Again, the GUI won't let you change permissions for the root dataset. Are you sharing out your root dataset? That's not a supported configuration. You can only change permissions/ACLs for a child dataset, and should be sharing out a child dataset.

 

[rtm5005]

I am beginning to think that is spot on that and perhaps very long ago I did exactly that while not exactly realizing this.

I feel like my best course of action would be to create a new SMB share in Vol01 and move the data over to that location and try working the ACLs from there. Sounds like a project for this weekend.