| Both sides previous revision Previous revision Next revision | Previous revision |
| misc_docs:nas_permissions [2022/07/29 13:19] – crashtest | misc_docs:nas_permissions [2024/04/25 00:56] (current) – crashtest |
|---|
| {{indexmenu_n>1}} | {{indexmenu_n>2}} |
| | <html><center><span style="color:#000066;font-size:300%;">NAS Permissions</span></center></html> |
| | \\ |
| | <html><center><span style="font-size:150%;"> |
| | <b>Link to</b> → <a href="https://wiki.omv-extras.org/doku.php?id=omv7:nas_permissions_omv7">NAS Permissions for OM7</a> |
| | <br/></span></center></html> |
| | <html><center><span style="font-size:125%;">(Given the similarity of the GUI's, <b>OMV6</b> users may find the <b>OMV7</b> permissions document easier to use.)</span></center></html> |
| | \\ |
| | ---- |
| | \\ |
| | \\ |
| | {{ :omv_logo.jpg?400 |}} |
| |
| <html><center><strong>Getting Started with:</strong></center></html> | |
| |
| |
| {{ ::omv_logo.jpg?400 |}} | ====== NAS Permissions In OMV5 ====== |
| | |
| | |
| ====== NAS Permissions In OMV ====== | |
| \\ | \\ |
| \\ | |
| This document can be converted to a PDF file, in the user's language of choice (see the following), on Windows, Mac's and popular Linux desktop platforms. Simply select the printer icon on the upper right corner of this web page. When prompted at the client, select “print to PDF”, name and save the file.\\ | |
| \\ | |
| [[https://translate.google.com/|Google Translate]] kann Wiki-Dokumente in Ihre Sprache übersetzen. Fügen Sie die Wiki-URL in das linke Fenster ein und öffnen Sie den übersetzten Link rechts.\\ | |
| [[https://translate.google.com/|Google Translate]] puede traducir documentos wiki a su idioma. Pegue la URL de la wiki en la ventana izquierda y abra el enlace traducido a la derecha.\\ | |
| [[https://translate.google.com/|Google Translate]] peut traduire des documents wiki dans votre langue. Collez l'url du wiki dans la fenêtre de gauche et ouvrez le lien traduit sur la droite.\\ | |
| [[https://translate.google.com/|Google]]翻訳はwikiドキュメントをあなたの言語に翻訳することができます。 左側のウィンドウにwikiのURLを貼り付け、右側の翻訳されたリンクを開きます。\\ | |
| \\ | |
| ---- | |
| \\ | |
| ===== General ===== | ===== General ===== |
| \\ | \\ |
| The purpose of this document is to provide an overview explanation of access control settings, using Samba network shares, in a peer-to-peer network. It's a brief explanation of permissions, as implemented within Openmediavault's GUI, with some usable examples. It does not apply, directly, to Domains or LDAP environments.\\ | The purpose of this document is to provide an overview explanation of access control settings, using Samba network shares, in a peer-to-peer network. It's a brief explanation of permissions, as implemented within Openmediavault's GUI, with some usable examples. It does not apply, directly, to Domains or LDAP environments.\\ |
| \\ | \\ |
| In Openmediavault's [[https://openmediavault.readthedocs.io/en/5.x/new_user_guide/newuserguide.html#|New Users Guide]], in the sections [[https://openmediavault.readthedocs.io/en/5.x/new_user_guide/newuserguide.html#setting-up-a-sf|Setting up a Shared Folder]] and [[https://openmediavault.readthedocs.io/en/5.x/new_user_guide/newuserguide.html#creating-a-smb-cif-samba-network-share|Creating a SMB/CIF “Samba” Network Share]], permission selections where made that will allow all local LAN users to connect to OMV server shares with **write** access. For home LAN's with one or two users, this may be adequate.\\ | In Openmediavault's [[https://openmediavault.readthedocs.io/en/5.x/new_user_guide/newuserguide.html#|New Users Guide for OMV5]], in the sections [[https://openmediavault.readthedocs.io/en/5.x/new_user_guide/newuserguide.html#setting-up-a-sf|Setting up a Shared Folder]] and [[https://openmediavault.readthedocs.io/en/5.x/new_user_guide/newuserguide.html#creating-a-smb-cif-samba-network-share|Creating a SMB/CIF “Samba” Network Share]], permission selections where made that will allow all local LAN users to connect to OMV server shares with **write** access. For home LAN's with one or two users, this may be adequate.\\ |
| \\ | \\ |
| On the other hand, some home users may want to prevent children from deleting files and provision to allow guest login's with Read only access. Further, small businesses may want to grant or restrict employee access to specific shares. These scenarios will require that permissions are implemented for NAS share access control.\\ | On the other hand, some home users may want to prevent children from deleting files and provision to allow guest login's with Read only access. Further, small businesses may want to grant or restrict employee access to specific shares. These scenarios will require that permissions are implemented for NAS share access control.\\ |
| === A Personal / Private Share === | === A Personal / Private Share === |
| \\ | \\ |
| A private share for an individual user could be created using ACL's and setting all users, but one, to **No access**. However, creating a group with one user might be the best approach.\\ | A private share for an individual user could be created using ACL's and setting all users, but one, to **No access**. However, creating a new group with one user might be the best approach.\\ |
| \\ | \\ |
| Note the names of the newly created groups, below, and the usernames in each group. The naming scheme keeps it simple.\\ | Note the names of the newly created groups, below, and the usernames in each group. The naming scheme keeps it simple.\\ |
| * Additions of new users or changes to existing user accounts, such as password changes, would need to be replicated at the server. | * Additions of new users or changes to existing user accounts, such as password changes, would need to be replicated at the server. |
| * Some use cases may benefit from using the [[https://pureinfotech.com/credential-manager-windows-10/|Credential Manager]] built into Win10. | * Some use cases may benefit from using the [[https://pureinfotech.com/credential-manager-windows-10/|Credential Manager]] built into Win10. |
| * Win10 workstations may need a few network configuration changes to access a server in a peer-to-peer network. It a workstation can't connect to an OMV server, see this [[https://www.mediafire.com/file/5yoo25285t91l3s/HOWTO-ConnectWin10toOMV.pdf/file|document]] for settings and work arounds. | * Win10 workstations may need a few network configuration changes to access a server in a peer-to-peer network. It a workstation can't connect to an OMV server, see this [[https://forum.openmediavault.org/index.php?thread/27179-how-to-connect-to-omv-smb-shares-with-windows-10-and-microsoft-servers/|document]] for settings and work arounds. |
| \\ | \\ |
| ---- | ---- |