Login to freenas without using computers domain

March 26, 2020, 1:11 pm

≫ Next: Authentication users FreeIPA to SMB - smb://share FreeNAS

≪ Previous: Create SMB Share of root dataset with full control

$

0

0

I'm setting up a freenas server for my film department in my school and its all configured, but the school computers use AD logins and when I try to login to the server through file explorer, it tries to use our schools domain. I can manually type in a domain I want to login with, but all of the combinations of domains I could think of don't work. I've tried "freenas\" "freenas.local\" "local\" "\". None of them seem to work. I can use FileZilla and login to it with the same login through...

Login to freenas without using computers domain

---

Authentication users FreeIPA to SMB - smb://share FreeNAS

March 28, 2020, 7:27 am

≫ Next: No Active Directory Service in FreeNAS 11.3-U1

≪ Previous: Login to freenas without using computers domain

$

0

0

Hello all.
Help my Please to configurate my FreeNas.
I have a work FreeIPA server on CentOS7 /DNS/Users/groups... (Now this server usable for authentication VPN users - everything is work)
Now i want to connect samba to FreeIPA and this is hard for me

My conf:
Directory Services -> LDAP

Code:

hostname: ipa.server01.local
BaseDN: dc=server01,dc=local
BindDN: (password to admin IPA account)
Samba Schema: enable

[ATTACH type="full" alt="Zrzut ekranu 2020-03-28 o...

Authentication users FreeIPA to SMB - smb://share FreeNAS

No Active Directory Service in FreeNAS 11.3-U1

March 28, 2020, 4:48 pm

≫ Next: Botched up certs. Locked out of GUI.

≪ Previous: Authentication users FreeIPA to SMB - smb://share FreeNAS

$

0

0

Hi all,
New to the forum with a new build and fresh install of 11.3-U1. I entered my domain info in Directory Services\Active Directory and saved. When I attempt to connect to my AD environment on this 11.3 install, there is no AD service in the GUI. If I attempt to start it via shell, the service does not exist. I installed from a CD (old school) and all went well. Everything else appears to be working without issue. I have rebooted several times to no avail. I previously had an old...

No Active Directory Service in FreeNAS 11.3-U1

Botched up certs. Locked out of GUI.

March 31, 2020, 9:26 am

≫ Next: Hopefully this is the right place

≪ Previous: No Active Directory Service in FreeNAS 11.3-U1

$

0

0

Sooo I managed to botch something up for cert I was using for my GUI. Of course I disabled acces via http so now I am stuck in shell limbo.

Firefox spews me this error:

Code:

 Your certificate contains the same serial number as another certificate issued by the certificate authority. 
Please get a new certificate containing a unique serial number. 
Error code: SEC_ERROR_REUSED_ISSUER_AND_SERIAL 

How do I switch from https to http from shell on a 11.1U4 machine?

Many thanks in...

Botched up certs. Locked out of GUI.

Hopefully this is the right place

March 31, 2020, 4:14 pm

≫ Next: Primary group wheel -> su is possible

≪ Previous: Botched up certs. Locked out of GUI.

$

0

0

Im running FreeNAS 11.3, I was trying to set up a group. After I clicked on save I got this error

[EFAULT] Failed to generate groupmap for [Groupname]: ()

am I going to have issues with this group I named?

Primary group wheel -> su is possible

April 2, 2020, 4:32 am

≫ Next: Users get Access Denied if they connect via IP Address. Connecting via Hostname works.

≪ Previous: Hopefully this is the right place

$

0

0

The doco says

Primary Group

drop-down menu

Unset New Primary Group to access this menu. For security reasons, FreeBSD will not give a user su permissions if wheel is their primary group. To give a user su access, add them to the wheel group in Auxiliary groups.

https://www.ixsystems.com/documentation/freenas/11.3-U1/accounts.html#groups

However:

Code:

freenas% id
uid=1000(test) gid=0(wheel)...

Primary group wheel -> su is possible

Users get Access Denied if they connect via IP Address. Connecting via Hostname works.

April 2, 2020, 10:59 am

≫ Next: FreeNAS and FreeIPA, Linux and Windows mix

≪ Previous: Primary group wheel -> su is possible

$

0

0

HI There,

We have had a FreeNAS system in Production for several years. Running 11.2 U8 and bound to AD. Seemingly out of nowhere last night users were unable to connect to their usual SMB Shares. Typically they use \\IP-address\Sharename. However now when they try to access the share they get access denied.

However, they CAN still access the share if they use the Hostname of the FreeNAS instead. \\Hostname\Sharename works fine. I've tried toggling the Trusted Domain and...

Users get Access Denied if they connect via IP Address. Connecting via Hostname works.

FreeNAS and FreeIPA, Linux and Windows mix

April 4, 2020, 12:37 pm

≫ Next: 11.3.u2 Active Directory

≪ Previous: Users get Access Denied if they connect via IP Address. Connecting via Hostname works.

$

0

0

I have a pair of FreeIPA servers set up for single sign-on of Linux clients. This is currently an all-linux system; I'd like to expand it to use FreeNAS as the NAS and Windows clients. I have searched but can't find a guide or best practices to set this up. I think Linux clients would access shares with NFS, Windows with SMB. I'm not yet sure if I can use the FreeIPA accounts and passwords on the windows hosts. If I can, then I'll need to get FreeNAS to authenticate all users using...

FreeNAS and FreeIPA, Linux and Windows mix

---

11.3.u2 Active Directory

April 8, 2020, 3:57 pm

≫ Next: FreeNAS/Univention UCS (possibility to make different pieces to work together)

≪ Previous: FreeNAS and FreeIPA, Linux and Windows mix

$

0

0

Hi

i had active directory working ok on 11.3u1, i have upgraded to u2 as i know there have been a number of ad joining issues fixed. I am now getting active directory reported as faulted, but wbinfo -t works successful, same with wbinfo -u and wbinfo -g, i can also access all the specified shares.

Below is a copy of the middleware log, anyone got any ideas how i go about investigating/resolving this? Sorry if this is obvious still quite new to freenas

FreeNAS/Univention UCS (possibility to make different pieces to work together)

April 9, 2020, 8:29 am

≫ Next: 11.3 Anonymous FTP 331 Password Required for anonymous

≪ Previous: 11.3.u2 Active Directory

$

0

0

Dear colleagues,

We are trying to integrate FreeNAS into the domain controlled by Univention UCS (we are testing migration from AD to UCS). Due to the existential dualism inside UCS: on the server OpenLDAP is used for Linux and Samba 4 ldap for Windows - we can either have:

(1) AD integration using "Active Directory" integration of FreeNAS (done via winbind/samba), but we loose UIDs/GIDs/Shell etc posixAccount attributes as they are stored in the OpenLDAP server, which is not queried...

FreeNAS/Univention UCS (possibility to make different pieces to work together)

11.3 Anonymous FTP 331 Password Required for anonymous

April 10, 2020, 5:43 pm

≫ Next: Change GUI login User

≪ Previous: FreeNAS/Univention UCS (possibility to make different pieces to work together)

$

0

0

I had an anonymous FTPS setup on 11.2 with no issues. Users would not provide a user/pass for login.

I upgraded to FreenNAS 11.3, and now on every reboot this error continues to come back. I have discovered that if I turn anonymous FTP off, save, then turn it back on, and save. The issue goes away, up until the next reboot.

Here is the log from FileZilla
Status: Connecting to 10.254.1.99:21...
Status: Connection established, waiting for welcome message...
Status...

11.3 Anonymous FTP 331 Password Required for anonymous

Change GUI login User

April 11, 2020, 10:15 am

≫ Next: [BUG?] Active Directory: "SAVE" Button disabled when trying to re-enable Directory services

≪ Previous: 11.3 Anonymous FTP 331 Password Required for anonymous

$

0

0

I'm pretty new to FreeNAS and I want to be able to login to the FreeNAS 11.2 UI using a user rather than the default root user. I have added a user to the wheel group (which I thought was the needed group) but no luck.

What settings do I need to change to allow for the different login user?
Thanks

[BUG?] Active Directory: "SAVE" Button disabled when trying to re-enable Directory services

April 16, 2020, 2:43 pm

≫ Next: Does 11.3-U2 still user smbusers?

≪ Previous: Change GUI login User

$

0

0

Hi all,

I have tried to re-enable Active Directory Services but for some reason, the "SAVE" button is disabled and I can't save changes I make in the UI.

Did I just find a bug or did I miss something?

Running FreeNAS-11.3-U1

Thanks for the help!

Does 11.3-U2 still user smbusers?

April 16, 2020, 8:05 pm

≫ Next: RSYNC over SSH without pw auth

≪ Previous: [BUG?] Active Directory: "SAVE" Button disabled when trying to re-enable Directory services

$

0

0

I just set up my first FreeNAS box this evening and am running into the Microsoft Account issue. My understanding is there should be a /usr/local/etc/smbusers file that maps my MS account e-mail address to the username in FreeNAS. When I created my account in FreeNAS I checked the Microsoft Account box and made sure to specify my e-mail. My install does not have an smbusers file and I have to manually authenticate using the username in FreeNAS. I also do not see the user map parameter in...

Does 11.3-U2 still user smbusers?

RSYNC over SSH without pw auth

April 17, 2020, 9:05 am

≫ Next: CA cert and Active Directory Problems

≪ Previous: Does 11.3-U2 still user smbusers?

$

0

0

Buonasera a tutti!
I have set up some share from automatically backup. I ran a simply script on my Mac that synchronise everything. I have tried to launch the script both from my user (jacopx) and from root. I have noticed that the ROOT communication doesn't not required the password authentication, my personal user instead it asking me the password everytime. Of course I have setup both users with RSA, and the SSH connections work without password. I can't understand with RSYNC no... Help?

---

CA cert and Active Directory Problems

April 19, 2020, 3:29 pm

≫ Next: Does freeNAS support a unified space for FTP and SMB access?

≪ Previous: RSYNC over SSH without pw auth

$

0

0

I had previously configured AD and imported the CA cert from my domain controller. Everything was working up until I upgraded to 11.2. Since the upgrade, I am getting alert stating that AD connectivity has faulted. When I go and try to reconfigure the settings, it starts complaining about the root CA certificate. Do I went and deleted the cert and re-imported it. That seemed to have made it even worse. Now when I go and re-configure AD and selecting the cert, it says the cert cannot be...

CA cert and Active Directory Problems

Does freeNAS support a unified space for FTP and SMB access?

April 20, 2020, 12:30 am

≫ Next: Active Directory Services "missing"?

≪ Previous: CA cert and Active Directory Problems

$

0

0

Does freeNAS support a unified space for FTP and SMB access? Use a user to access the space in the form of FTP or SMB instead of dividing into 2 spaces and 2 accounts; for example /mnt/NasPool/SharePool/share (FTP, SMB)

Currently：
FTP： ftpuser/password
/mnt/NasPool/SharePool/ftpshare

SMB: smbuser(AD Account)/password
/mnt/NasPool/SharePool/smbshare

Active Directory Services "missing"?

April 20, 2020, 5:59 am

≫ Next: I'm trying to understand users, groups in FreeNAS.

≪ Previous: Does freeNAS support a unified space for FTP and SMB access?

$

0

0

Hi Team,

I'm building a new Freenas system on a SuperMicro 12 bay SAS2 HBA setup. After finally getting past some issues with memory it is now installed, seeing all disks and ready to start configuration. However, I have encountered a problem with Active Directory.

When I attempt to join the domain, the UI shows as "joined" by presenting me with a leave domain button but when you navigate out and back in, it disappears. A Kerberos realm appears for the domain i've "joined" it to as well as...

Active Directory Services "missing"?

I'm trying to understand users, groups in FreeNAS.

April 20, 2020, 1:01 pm

≫ Next: Lost AD after 11.2-U8 upgrade, how to clean out AD/Kerberos settings

≪ Previous: Active Directory Services "missing"?

$

0

0

So I'm new to everything but I want to learn as best as I can, sorry if some of my doubts are dumb.
I've read some docs and some posts but I don't have clear some things. Some things I have understood/questions:

1) Every directory/file has a user owner and a group owner. This will allow/deny permission to specific actions (i.e. write, read...)
This is can be changed with the command

Code:

chown xxx user_name:group_name path_to_folder

2) A user can be inside multiple groups therefore...

I'm trying to understand users, groups in FreeNAS.

Lost AD after 11.2-U8 upgrade, how to clean out AD/Kerberos settings

April 23, 2020, 1:30 pm

≫ Next: Mixed authentication

≪ Previous: I'm trying to understand users, groups in FreeNAS.

$

0

0

I lost active directory following an upgrade to FreeNAS 11.2-U8 and usual tricks have not brought it back. (E.g., after a OS train upgrade, I had to re-enable AD, and then it successfully did a re-bind to the domain controller. This time it did not.)

The original error that was reported was:

Code:

python: GSSAPI Error:  Miscellaneous failure (see text) or directory (open(/tmp/krb5cc_0): No such file or directory)

I've followed the instructions in...

Lost AD after 11.2-U8 upgrade, how to clean out AD/Kerberos settings