I see some similar posts, but is there one simple answer? This is after a common, all users’ network server logon.
(Sorry if my terminology sucks.)
On further thought, after logging onto the server, can there be a secondary user login?
I have three folders All, usr2, usr3
I can juggle permissions via the TrueNAS Admin menus for these folders, but that’s just brute force clunky. I’m hoping for a bit more refinment and finess.
You can’t have several layers of login/authentication when accessing SMB shares, no.
As you say, this has been discussed recently, have another look at the other thread.
Edit: I just noticed the topic starter of the other thread was you.
Why did you feel the need to make another thread on the same topic?
Somewhat different approach and expectations.
Didn’t mean to upset the correct protocols.
You go to the hospital, your folder/file is on the server, some users cannot read or write to your file, others users can read only, still other users can both read and write.
I’m coming to the conclusion TrueNAS can’t do complex user/folder permissions like those above.
If a logon page appeared when the network address was used, you could logon as different users, but after one logon even if you select forget password and unmount the server drive, no optional logon window reappears. One user only.
Your conclusion is wrong. We support standard SMB ACLs just like any SMB server.
Glad to hear it, I wanted the hospital permissions scenerio to be possible in TrueNAS.
So far users having to identify themselves and their premission status within the server doesn’t appear possible. Click on a restricted folder, no security password defining permission status required to open the folder.
I suggest perhaps reading up on documentation about these protocols. You can’t just switch credentials in an SMB session. You can set different permissions on different directories in a share to control access. This isn’t a TrueNAS thing, it’s a computer thing.
I often get this feeling I’m missing something obvious.
That: “If this was a rattlesnake, I’d be bitten” feeling.
I have a one: pool, dataset, group, user, ACL, SMB server that everyone can run amuck in as they want.
I’m seeking maybe a little finesse. A bit of order in the chaos. WHY? Just because.