I need a guide for TrueNAS scale ACL configuration

[chamith 4]

I have created UID and GID in Env variables

I have a dataset called media (I use this to store my media files)

As I am a newbie, I need to know how to configure Posix1e ACL to access my data on Emby Server.

And I like the best security.

Can someone tell me how to configure it? I have no idea about posix ACL @Q-Droid

[Q-Droid 989]

Why do you need to configure ACLs? It's not a trick question, just trying to understand your use case and needs.

 

[chamith 4]

I Cant See my media files on emby

[Q-Droid 989]

What values are you using for UID/GID and are they associated with a user/group in TrueNAS?

Your first step should be to create a user and group to use with Emby. If your current UID/GID don't belong to a user/group then assign those values to the ones you create. If the UID/GID belong to a built-in system account and you're early into the setup then consider redoing it with a dedicated emby user and group.

Then you can recursively change user/group ownership of your media dataset (dataset -> view permissions -> edit) and this should allow access by Emby.

The ACLs come into play if you plan to add/change media files as a different user. Adding default ACLs to the dataset for both emby and other users or groups would preserve access as new files are added. But first get user/group ownership sorted.

 

[chamith 4]

I created the user and group on the connected NAS with the same UID and GID used for the emby values

And I changed Posix ACL to NTSv4, because it seems easier than posix type.

then i changed ownership group to emby_user group. 

Do I need to change ownership user root to emby user or add new user ---> emby user with RWX permissions?

Consider ,

        User Name: emby , ID: 1002

        Group Name: emby_user, ID:1002 

Edited August 26, 2022 by chamith

[Q-Droid 989]

Let's back up a little.

You have a NAS box exporting an NFSv4 share and this is mounted on the TrueNAS box? Need more info because this can change things.

You've taken the right approach matching the UID/GID between systems and hopefully you have a user/group on TrueNAS for those, even if not the same names.

The ownership from the NAS should remain the same on TrueNAS if NFS mounted, since you've chosen the same UID/GID on both. Just make sure it's consistent for the whole media tree, files and directories.

The next steps would depend on how you have this configured and the underlying filesystem used on the NAS.  From my question above.

Also, I'm not sure how or if TrueNAS can manage that share from the GUI as an NFS client.

 

[chamith 4]

I don't know if that's correct, but it worked so far and now I can add my media library

[Q-Droid 989]

Did synchronizing the UID/GID fix the problem or did you do something else?

 

[Volkodav 1]

I have similar situation actually but a nit more complicated. I have access to emby files all right but I recently imported another pool form another server and now I am trying emby to see these shares. I've changed NTSv4 to inherit  to match the rest of my system and permission do look different even though I added same users and groups. I do not have specific user and group for emby because when installing I remember that user:bin was sufficient to use and it works. I got nextcloud to see these shares all right along with Samba but not Emby. I have around 1.5 Tb of data I need to add. Where should I dig? Obviously it is a permission issue the way I see it. I attached some screenshots of working and non-working setups. /mnt/Main works and /mnt/Storage/Media does not.

Also they still seem to be NTSv4 even though I changed them - do I need to reboot?

Edited October 16, 2022 by Volkodav
Solved the other way- I just added additional storage path in emby's container config - that's all!

[Luke 42078]

On 10/16/2022 at 4:38 AM, Volkodav said:

I have similar situation actually but a nit more complicated. I have access to emby files all right but I recently imported another pool form another server and now I am trying emby to see these shares. I've changed NTSv4 to inherit  to match the rest of my system and permission do look different even though I added same users and groups. I do not have specific user and group for emby because when installing I remember that user:bin was sufficient to use and it works. I got nextcloud to see these shares all right along with Samba but not Emby. I have around 1.5 Tb of data I need to add. Where should I dig? Obviously it is a permission issue the way I see it. I attached some screenshots of working and non-working setups. /mnt/Main works and /mnt/Storage/Media does not.

Also they still seem to be NTSv4 even though I changed them - do I need to reboot?

@Volkodav did you figure this out?

[Volkodav 1]

Yes I did . I added a special storage in Emby config and it worked

[chamith 4]

On 27/08/2022 at 17:32, Q-Droid said:

Did synchronizing the UID/GID fix the problem or did you do something else?

 

Sorry for the late reply. Yes, I synced the GID UID and I had to do something else, but I don't remember exactly. I learned a lot during that time. For starters; Better to know Linux and a good understanding of file and directory permissions if you're messing with configuration. Thanks everyone for making this conversation more interesting and solvable .