Backup and share question

Hi,

I am planning to use truenas as secure place to store customer sensitive data.
Nas is sitting in our local network and shares available to workstation.
I am thinking if there is a way to require password every time when accessing share. What i am trying to acquire is that if somebody (outsider) has managed to get access to workstation, he could not access share without password.

Have anybody produced solution like this?

Another question about storj cloud backup. I opened storj account, and created backup task. It runs fine, but I am wondering that there is only three methods: sync, copy, move.

I cannot use sync, because it is not proof against accidental user file deletes, as it deletes files from backup too.
Copy (regarding user manual) copies ALL files to cloud every time. This is uses very much time and network capacity to copy existing files every time backup is ran. Would it be better if there is RSYNC-option also? So copy only changed and unexistent files? Or am I missing something?

This is a windows “problem”.

  • open gpedit.msc
  • Local Computer Policy → computer configuration → windows settings → security settings → local policies → security options
  • under network access : do not allow storage of passwords and credentials → set to “enabled”

Hi, Yes I am aware that i can disable password saving completely, but I don’t want to do it. There is many other places where it is needed.

i am looking a solution where user must “log on” every time when he/she wants to explore content. I don’t know if that is possible with any nas or not.

It is completely a client issue, not controllable by the server side, it is a matter of cached credentials on client side, the only viable solution is what @Farout is pointing out.

Maybe i’m misurundestending the situation, but if you connect to SMB Share you can decide to save credentials or not on the specific resource.

But you cant make sure that someone is not checking the “safe password” box ’ by mistake’.

Right now we are using this solution:

It uses frontend client what encrypts everything what user saves to shared folder (nas). And can also log user out from share when specified time has gone. This is safe as nas folder is encrypted and nobody can access it without frontend client with password.

Sadly, there is no customer support anymore and whole product and company seems to be dead. So I am looking something similar.

I know that this needs frontend client and is not really truenas-related, but wanted to ask if somebody has faced similar problem and found an answer.

Our data is very sensitive and we cannot store it to cloud. Also I need to make sure that if somebody hacks to workstation, there still is one “barrier” until shared data is accessible.

Have anybody idea for cloud backup question?
My first backup is still running and there is estimate 20 hours left (has run 15hours now). If I want to backup daily, it does not finish until new backup starts. And it also stucks internet connection.

Good point. Never trust human :laughing:

Have you get a look into VeraCrypt?

Yes, but veracrypt does not support shared use as far as I know.