Unable to add Active Directory Group/permissions

TrueNAS General
1

Hi Folks.

I have what seems like a simple issue regarding groups, and I hope I’m not a bother by asking about it here.

We use TrueNAS Community Edition. I want to add a group that already exists in Active Directory, which our server is already attached to.

I go Credentials → Groups. For GID I enter the GID that I have given the group in our Active Directory domain. For Name I thought I had to enter it as DOMAIN\my-group-name but as soon as I start typing it tells me I cannot use a “.” If I enter the group without the DOMAIN as soon as I tab to the next field it tells me that the GID is already in use and then lists the DOMAIN\my-group-name that I was trying to add.

I’ve read the documentation and also read several “similar” posts on this site, but I can’t find anything with this sort of situation/problem.

We have three TrueNAS nodes that all back up to each other, and on one of the other nodes when I click “Groups” I see a group that I had successfully created on that node with group listed as MYDOMAIN\another-group and the correct GID, so I’m not sure what I did differently there than I am trying to do now.

Does that make any sense?

Thanks in advance for any suggestions, and I apologize if I’m just being obtuse.

Mike

2

It tells me I can’t use a backslash () not a period. Sorry if I fat-fingered that.

3

You are supposed to join TrueNAS to the domain. All users and groups will be available for ACLs automatically, then.

4

Hi and welcome to the forums.

Are you trying to assign an AD group for permissions on a dataset?

If not then what exactly are you trying to achieve with this group?

5

Yes! That’s exactly what I’m trying to do! Sorry I wasn’t more clear.

I have an NFS share to a Linux server that is also connected to our AD. I want the permissions on the share to match the permissions for the group that controls the server in question. Right now the directory/share works correctly, but nobody has any permissions to write any files to it.

If I try to chgrp it on the command line (either to it’s AD GID or it’s AD group name) I am told “operation not permitted.”

I think what I need to do is set ACLs on the dataset inside TrueNAS, which is what I have done in the past, but I thought the first step of that was telling TrueNAS about the AD group.

Thanks for the responses, and again, my apologies if I’m not explaining myself correctly!

Mike

6

Are you root when trying that? truenas_admin cannot.

Just go straight to the ACLs - the groups will be there.

Possibly not browsable but if you type out the full name it should work.

2 Likes
7

Oh my goodness.

YES, changed the group in a terminal as root and it worked, and then went to the SAN node and lo-and-behold there it was as the correct owner of the dataset.

You folks are wonderful.

Thanks again!

Mike

1 Like