Page 1 of 1
Shared SMB folders and group permissions
Posted: 20 Sep 2024, 19:32
by deasterix
Hi,
Sometimes when I share a folder my admin user is shown to have read/write permissions on the Shared Folders control panel. The setting is greyed out and I cannot change it. My admin user is member of the group admin and also this group is shown read/write permissions on the shared folder and it's greyed out. However connecting to the folder is not possible. When talking a look at /etc/samba/smb.conf I can see that TOS simply doesn't add groups:
[doesntwork]
path = /Volume2/foobar
browsable = yes
writeable = yes
write list = admin
valid users = admin
hosts allow = *
vfs objects = full_audit
full_audit:syslog = true
full_audit:prefix = %u|%I
full_audit:success = connect mkdirat renameat unlinkat linkat create_file symlinkat
full_audit:failure = connect
For the Shared Folders which work, my admin user is explicitly added to the list.
write list = johndoe,admin
valid users = johndoe,admin
However TOS won't let me change it via the UI. Additionally it should be:
write list = @admin
valid users = @admin
Because if not then why in the world does it offer to set group permissions (which are set).
If I create a dummy user and assign it to the share then it's added to the share:
write list = dummy,admin
valid users = dummy,admin
And I can also access the share with the "dummy" user, but it seems to be impossible to add my admin like for the other shares.
Re: Shared SMB folders and group permissions
Posted: 20 Sep 2024, 20:31
by Gremlin
Which TOS version please? I have been having similar issues with 5.1.145.
Re: Shared SMB folders and group permissions
Posted: 21 Sep 2024, 17:41
by TMlinda
You can contact the online customer service of the official website to arrange for a technical engineer to solve this problem for you remotely. In TOS5.1.145 system, please do not tick the options of "No limit" and "Administrator has full permission, other users are read-only" when you create a shared folder. If you tick them, this problem will occur. It will be fixed in subsequent versions.
Re: Shared SMB folders and group permissions
Posted: 21 Sep 2024, 18:38
by Gremlin
What about shared folders created prior to 5.1.145 update?
Re: Shared SMB folders and group permissions
Posted: 23 Sep 2024, 04:54
by deasterix
Same version. When you create a shared folder, you have to select "Set permissions, by user". Group permissions are simply broken and do not work, because as seen above the resulting .conf (which is re-created from some internal settings so no point in changing it manually) is missing the "@" sign before group names.
Re: Shared SMB folders and group permissions
Posted: 15 Nov 2024, 16:43
by lianbo
About a month ago I bought a Terramaster F4-424 PRO primarily for document sharing for 30 users with set privileges over folders (group permissions). I install latiest OS TOS 5.1.145-00320, and encountered serious problems with setting up shared folders and folder access privileges, In my opinion, it is unprofessional not to solve mistakes that are important to normal work for a couple of months. If Terramaster wants to be a serious company, things like this should be a priority. You have a TOS 5 operating system that you have declared as a stable version, then you must state in the instructions that certain options do not work or disable them in the program until you solve the problem. I am grateful to users @deasterix , @TMwuu who provided an option to temporarily solve the problem.
Re: Shared SMB folders and group permissions
Posted: 26 Dec 2024, 20:24
by deasterix
TMwuu wrote: ↑21 Sep 2024, 17:41
You can contact the online customer service of the official website to arrange for a technical engineer to solve this problem for you remotely. In TOS5.1.145 system, please do not tick the options of "No limit" and "Administrator has full permission, other users are read-only" when you create a shared folder. If you tick them, this problem will occur. It will be fixed in subsequent versions.
Hi,
When do you plan on fixing the issues with groups? I mean why have a NAS, if it doesn't support any group permissions and why do you offer the option to manage permissions based on groups in the first place when creating a folder, if you know that it isn't working at all?
All apps and a boatload of whatnot features are pretty useless if you can't get the most basic thing done with TOS.
Regards
Re: Shared SMB folders and group permissions
Posted: 30 Dec 2024, 19:16
by TMLila
deasterix wrote: ↑26 Dec 2024, 20:24
TMwuu wrote: ↑21 Sep 2024, 17:41
You can contact the online customer service of the official website to arrange for a technical engineer to solve this problem for you remotely. In TOS5.1.145 system, please do not tick the options of "No limit" and "Administrator has full permission, other users are read-only" when you create a shared folder. If you tick them, this problem will occur. It will be fixed in subsequent versions.
Hi,
When do you plan on fixing the issues with groups? I mean why have a NAS, if it doesn't support any group permissions and why do you offer the option to manage permissions based on groups in the first place when creating a folder, if you know that it isn't working at all?
All apps and a boatload of whatnot features are pretty useless if you can't get the most basic thing done with TOS.
Regards
Hi!
Thank you very much for your feedback.
Regarding the group permission issue you mentioned, we recommend upgrading to the latest system version. In version 6.0, we have optimized the permission system, and now the final permissions for users will take into account both the user's individual permissions and the permissions of the groups they belong to. If you encounter any issues after upgrading, please contact us promptly to provide feedback.
Below is the forum link for the update notes of TOS for the x86 series. If you have any questions while reading, feel free to reach out to us at any time.
viewtopic.php?t=6984