How to Manage Users and Shares in NethServer 8?

Support
1

NethServer Version: 8

Module: Domain and users

Hi everyone! I’m new to NethServer and am testing it for deployment in a small company.

I noticed that NethServer 8 has some limitations, one of which is that you can’t add multiple groups to a Share.

  1. I created a Windows 10 Virtual Machine and installed RSAT. I tested GPOs (worked well), creating users and groups (worked well), and changing ACLs on shares (didn’t work 100%).
  2. I use RSAT’s Shared Folders to assign permissions to access the share. It works well.
  3. To assign permissions to a folder, I go to Explorer > Network > \fileserver > Properties on the desired Share > Security > Add.

However, in some cases, permissions aren’t assigned to all folders.

  • For example, I already had the TEST folder created with some files. I added a new group to the share, but it’s not applying the ACL to the other folders.
  • When I check the “Replace all child object permission entries with inheritable permission entries from this object” option, I get an access denied message.

I don’t know what to do, since I can’t add ACLs via Samba or SSH the way I know them.

I don’t have much experience with this type of application; it’s my first time. I’ve only worked with AD a few times, so I only know the basics.

Thank you all for your attention.

2

Hi Gilson, welcome to the NethServer community!
Could you attach some screenshots so we can get an idea of the current ACLs? I hope attachment permissions are already enabled on your new Discourse profile - if not, a short textual description will do.

3

Hi davidep, thans for your reply!

Maybe I discovered the problem after spending the whole night thinking about it.

I had a Windows Server 2016 server. I deactivated it and installed Debian + NethServer 8. I moved the data to Debian. When creating the share on NethServer, I copied the files to the shared folder within Debian. I believe the copied folders inherited Debian’s permissions (I had forgotten that detail), which aren’t included in AD itself.

Anyway, it’s good to know I can count on the community. Besides this issue, I’d like to know about using RSAT in this environment, whether I can continue using it, or if there’s a recommended way.

Thank you all for your attention.