ACL type mismatch

TrueNAS General
1

After upgrading to the latest version of TrueNAS I have some errors I don’t understand:

SMB shares have path-related configuration issues that may impact service stability: 

DS413: ACL type mismatch with child mountpoint at /mnt/zfsvol1/ix-applications: zfsvol1 - NFSV4, zfsvol1/ix-applications - POSIX, 
DS413: ACL type mismatch with child mountpoint at /mnt/zfsvol1/ix-applications/k3s: zfsvol1 - NFSV4, zfsvol1/ix-applications/k3s - POSIX,
DS413: ACL type mismatch with child mountpoint at /mnt/zfsvol1/ix-applications/default_volumes: zfsvol1 - NFSV4, zfsvol1/ix-applications/default_volumes - POSIX, 
DS413: ACL type mismatch with child mountpoint at /mnt/zfsvol1/ix-applications/catalogs: zfsvol1 - NFSV4, zfsvol1/ix-applications/catalogs - POSIX, 
DS413: ACL type mismatch with child mountpoint at /mnt/zfsvol1/ix-applications/releases: zfsvol1 - NFSV4, zfsvol1/ix-applications/releases - POSIX

I have seen a similar post here with a request to forward a system log privately. This is my first post here and I have no idea how to go about this (instructions appreciated; yes, I had a look around the site). Advice welcome.

FWIW I upgraded through several releases (DS413 is an rsync backup destination). Never had an issue with any upgrade in the last 10 years (all on the same box)

2

Somehow your ix-applications dataset got created with the NFSv4 acltype (or was changed to it after-the-fact). This shouldn’t happen. You can change it back to posix1e to eliminate the alert, but generally you shouldn’t have any of these paths within an SMB share.

3

Same issue Im facing there, reading your post i delete and old SMB rule imported from core where i Share directly the entire pool. Should be enough or need something else?

4

Typically you should create a dataset and then an SMB share to it (or share something other than root level of pool).

1 Like
5

Ok thanks, so i will see if at this night replication this error will ba raised again

6

Here’s what my datasets look like

image
image711×306 24.7 KB

I looked at changing the acltype for the ix-applications dataset and the choices on offer do not include posix1e. The ACL type is Posix. The path is not within an SMB share.

7

What is output of testparm -s? POSIX == POSIX1E.

8 
root@freenas[~]# testparm -s? POSIX==POSIX1E
zsh: no matches found: -s?
root@freenas[~]# 
type or paste code here
9

The question mark was not part of the command: testparm -s

10 
root@freenas[~]# testparm -s POSIX==POSIX1E
Load smb config files from POSIX==POSIX1E
Error loading services.
type or paste code here
11

You’re still typing it wrong. testparm -s

No POSIX==POSIX1E. I was trying to state to you that POSIX is POSIX1E when talking about ACLs.

12 
root@freenas[~]# testparm -s
Load smb config files from /etc/smb4.conf
Loaded services file OK.
Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback)

Server role: ROLE_STANDALONE

# Global parameters
[global]
	bind interfaces only = Yes
	disable spoolss = Yes
	dns proxy = No
	load printers = No
	logging = file
	max log size = 5120
	passdb backend = tdbsam:/var/run/samba-cache/private/passdb.tdb
	printcap name = /dev/null
	registry shares = Yes
	restrict anonymous = 2
	server min protocol = NT1
	server multi channel support = No
	server string = FreeNAS Server
	winbind request timeout = 2
	workgroup = XXXXXX
	idmap config * : range = 90000001 - 100000000
	fruit:zero_file_id = False
	fruit:nfs_aces = False
	idmap config * : backend = tdb
	create mask = 0664
	directory mask = 0775


[DS413]
	ea support = No
	kernel oplocks = Yes
	path = /mnt/zfsvol1/diskstation/ds413
	read only = No
	smbd max xattr size = 2097152
	vfs objects = zfs_space zfsacl streams_xattr
	tn:vuid = 
	fruit:time machine max size = 0
	fruit:time machine = False
	nfs4:chown = True
	tn:home = False
	tn:path_suffix = 
	tn:purpose = NO_PRESET
root@freenas[~]# 

type or paste code here

I redacted the workgroup name.

13

What version of TrueNAS is this?

14

Version: ElectricEel-24.10.0

15

Hmm… can you PM me output of cat /proc/self/mountinfo? Have you done bind mount of ix-applications into an SMB share?

16

I did that … any ideas?