[[fester:shares_basic]]

This is an old revision of the document!


Fester's Very Basic One User/One Dataset Experimental Starter Share

Fester is still learning about shares and in particular share permissions.

As Fester learns more I will try to pass on what I have learned by adding to this section and creating additional guides for more “real world” share scenarios (if time permits).

This particular share will not be much use to most people, but it will get you going.

Don’t forget the official FreeNAS guide has lots of information on shares. But for now, this will be a very basic share on a FreeNAS system and is designed to get you started so you can experiment with shares.

This share is designed for one user who wants to access the same share from different client machines.

The client machines will mostly be running Windows (or Mac OS X).

It will utilise one dataset and show you how to share it.

It is designed to get you started with shares so that you can experiment.

Go to the “Accounts” page (1) and click the “Add Group” button (2).

A new smaller window will pop up. Here we can create a new Group.

Leave the “Group ID:” at its default value of 1001 (1).

Now type in a name for the new group in the “Group Name:” text box (2) (because this is a starter share from which you can experiment, Fester used TestGroup).

Do not tick the “Permit Sudo:” or “Allow repeated GIDs:” tick boxes (3).

Now click the “OK” button (4).

If all goes well an entry should appear in the Account → Groups page. You should see something like this.

Now go to the “Accounts” page (1) and click the “Users” button (2).

A new window will pop up. Here we can create a new User.

Leave the “User ID:” at its default value of 1001 (1).

Now type in a name for the new user in the “Username:” text box (2) (because this is a starter share from which you can experiment, Fester used TestUser).

Untick the “Create a new primary group for the user:” tick box (3).

The “Primary Group:” drop down selection box (4) should now become active. The group we created earlier (i.e. TestGroup) should be available for selection.

Leave the “Create Home Directory In:” text box at the default /nonexistent (5).

Leave “Shell:” at its default setting (6).

Type in a name for the new user (7) (Fester chose Test User).

Create a password in the “Password:” text box and confirm it by retyping it in the “Password Confirmation:” text box (8) (because this is a starter share to experiment with Fester just used test. Make sure you use a stronger and less predictable password when you create your real/final share/s).

Now scroll down.

Do not tick the “Disable password login:” you will lock yourself out of the share.

Leave the “Lock user:” and “Permit Sudo:” at their default settings of unticked (9).

Fester will be accessing this account from a windows machine so I tick the “Microsoft Account:” tick box (10).

Now click the “OK” button (11).

Now we need to create the dataset.

Go to the “Storage” page.

Select “Tank1” or whatever you called the volume (1) by clicking on it (it should turn blue when selected).

A series of buttons should appear on the bottom of the screen.

From these buttons click on the one that creates a dataset (2).

A new smaller window will pop up for creating the dataset.

In the “Dataset Name:” text box (1) give the share a name (because this is a starter share from which you can experiment, Fester used TestShare).

Leave the “Compression level:” drop down selection box (2) set to lz4.

Set the “Share type:” to whatever suits the type of clients on your network (Fester has mainly Windows machines so I set this to Windows).

Leave the “Case Sensitivity:” drop down selection box and “Enable atime:” at their default settings as shown (4).

“ZFS Deduplication:” should be set to off in the drop down selection box (5) unless you understand this and you have plenty of memory.

Now click the “Add Dataset” button (6).

The dataset will now be created and you should see something like this.

Remain on this screen and select the newly created dataset (1) if it is not selected already (in Fester’s case this was TestShare).

Now click on the change permissions button (2).

A new window will pop up for changing the permissions of the new dataset.

Leave the “Apply Owner (user):” tick box (1) at its default setting (with a tick).

In the “Owner (user):” drop down selection box (2) select the new user you created a moment ago (in Fester’s case this was TestUser).

Leave the “Apply Owner (group):” tick box (3) at its default setting (with a tick).

In the “Owner (group):” drop down selection box (4) select the new group you created a moment ago (in Fester’s case this was TestGroup).

Leave the “Apply Mode:” tick box (5) at its default setting (with a tick).

If you have chosen “Windows” as the Permission Type then the “Mode:” tick boxes (6) will be greyed out so you can not alter them. FreeNAS will prevent you from making alterations here and is correct to do so. This is because if you did you could break the share.

Set the “Permission Type:” radio button (7) to match the clients on your network (Fester has mostly Windows machines so I set this to Windows).

Put a tick in the “Set permission recursively:” tick box (8).

Now click the “Change” button (9).

Now we need to create a CIFS share. On a network that utilises predominately Windows clients this is a good choice.

Go to the “Sharing” page.

Now click the “Windows (CIFS)” button (1) and then click the “Add Windows (CIFS) Share” button (2).

A new smaller window will pop up.

In the “Path:” section click the “Browse” button.

The window should now expand a little and allow you to navigate to the newly created dataset (1).

When you have it selected click the “Close” button (2).

The “Path:” text box (1) should now display the chosen dataset.

Do not tick the “Use as home share:” tick box (2) at the moment.

Give the share a name in the “Name:” text box (3).

Put a tick in the “Apply Default Permissions:” tick box (4) if a tick is not present.

Do not tick the “Allow Guest Access:” tick box (5).

Now click the “OK” button (6).

If all goes well you will see the newly created CIFS share entry (1).

You will now be asked if you wish to enable the CIFS share service.

Click the “No” button (2).

Now go to the “Services” page.

Click on the little spanner next to the “CIFS” service (1).

A new window will pop up.

The NetBIOS name will already be present in the “NetBIOS Name:” text box (2).

In the “Workgroup” text box (3) type in the name of the workgroup you want to use on the client machines (Fester used T ESTWORKGROUP because it is an experimental starter share). If you don’t know your Workgroup then skip to the relevant section on how to do this.

Type in a good name for the CIFS share in the “Description:” text box (4).

Do not alter the default values of the “DOS charset:”, the “Unix charset:” and the “Log level:” (5).

Leave the “Use syslog only:” (6) at its default (no tick).

Make sure the “Local Master:” tick box (7) is ticked.

Leave “Domain logons:” (8) unticked.

Leave “Time Server for Domain:” (9) ticked.

Leave “Guest account:” (10) at nobody.

Do not put anything in the “File mask:” and “Directory mask:” text boxes (11) unless you really understand UNIX permissions (Fester can’t help you here).

Do not tick the “Allow Empty Password:” tick box (12) as this weakens the security of the share.

Leave the “Unix Extensions:” and “Zeroconf share discovery:” tick boxes (13) as they are.

Untick the “Hostnames lookups:” tick box (14) otherwise you will keep getting a name mismatch error.

Set the “Server maximum protocol:” (15) to SMB2.

Leave the “Allow execute always:” tick box (16) in its default setting (with a tick).

Fester has no idea what the “Obey pam restrictions:” setting (17) actually does. I just leave it ticked, but I have no idea how it should be set.

Don’t tick any of the IP address text boxes (18) in the “Bind IP Addresses:” section.

The “Idmap Range Low:” and “Idmap Range High:” settings (19) Fester does not touch as I don’t know what they do.

Now click on the “OK” button (20).

  • fester/shares_basic.1497869953.txt.gz
  • Last modified: 2017/06/19 10:59
  • by admin