FreeNAS / Active Directory

[dwimorberg]

Hi there, does anyone have experience in getting FreeNAS shares to work with Active Directory groups? I'm finding a bit of a black hole of information relating to this apart from a few reports that it doesn't work in v0.6.4. I'm running 0.6.9 and can get FreeNAS to successfully pull in the AD user list, but that's about as far as I get.

AD has the following security groups: Pupils and Staff
FreeNAS has the following shares: Shared (for pupils) and Staffdata (staff only)
The local dirs are set with chmod to Owner group Staff, then 777 for Shared and 770 for Staff.

What I'd like is for the AD "Staff" group members to have seamless access to both shares, and the AD "Pupils" group members to only have access to the "Shared" share.

I'm hoping this can be done but my *nix file system knowledge is pretty ropey to say the least!

Any help will be much appreciated. Tea and cake readily available!!

Cheers,
Michael

[somabc]

You may find openfiler more suitable for AD integration?

[dwimorberg]

Yeah, I've actually just found that via one of the other posts! I've got another PC to play with so I'll give Openfiler a shot tomorrow and see how it goes.

Cheers!

[dwimorberg]

Woot! I can confirm that after only two short weeks of fiddling around with Openfiler, I've managed to get it working! They don't make these things easy do they?!

Aaanyhew, if anyone's interested I'm currently writing up a graphical how-to for getting Openfiler 2.3 set up with Active Directory. I'll post a link here a bit later on.

Thanks for the suggestion for Openfiler though, it's doing the job nicely

[plexer]

hmm sorry wished I'd seen this earlier don't know why you had 2 weeks of fiddling.

I had it working with AD within a day.

Ben

[dwimorberg]

It was mostly the totally un-self-explanatory stuff like for the LDAP Username and passwords, having to put in "username@domain.local". I trawled through the OpenFiler forums to grab bits of hints and tips but they weren't really a lot of help. I kind of got the feeling they wanted you to spend the money on buying the user guide!!

Admittedly it was my fault the shares weren't working, I specified the wrong subnet, but again there wasn't any real guide to telling you to set up the network first

However, that said, it's working like a charm now! Long live slightly-better-documented open source

[dwimorberg]

Here you go, a step-by-step guide to getting OpenFiler to work with Active Directory. I'll mention it's not the definitive way of setting up OpenFiler but it worked for me when practically everything else didn't! That and I'm not an expert by any means

Michael's guide to setting up OpenFiler 2.3 with Active Directory as a NAS box

Hope it helps,
-Michael

[plexer]

Michael: Fantastic thanks for taking the time to do that guide.

Maybe it could be added to the wiki as well?

Ben

[dwimorberg]

Certainly! How do you go about doing that?

[plexer]

go to the wiki from the links at the top of the page and you can create a new page for your info.

Ben

[Dhruva25]

Michael:
I am new to FreeNas ....
Please help me with ADS Integration.....

Please help me with for pulling the ad users details.....

Best Regards,
Dhruva

[dwimorberg]

Hi there Dhruva,

Pulling in the Active Directory usernames wasn't so much of a problem in FreeNAS as was what to do with it next; there doesn't seem to be any more integration than that of it being able to display the usernames and group names (maybe I'm missing something obvious though?). This was the reason I turned to OpenFiler instead.

I don't have my FreeNAS notes here at the moment, but I'll reply again tomorrow and let you know how I got it to talk to AD.

[EduTech]

Michael if you haven't already done so, i'll add this to the wiki tomorrow morning.

James.

[dwimorberg]

Cheers, please do! To be honest I had a look at doing it but I couldn't figure that out either! I must be having a blond week Is there an obvious way of adding it to the Wiki?

[EduTech]

No Problem, i'll sort that out.

Go to Wiki > Find Appropriate Area for Topic (if it's not there, then create it) > Edit The Page (click edit > or click the edit icon on the control panel in top right) >

Add a link to your page in that area > [[TUTORIAL FOR BLAH]] > then publish that and open the page and then click EDIT again and then add your information.

Thats just breif, if people do find it difficault to add content to the wiki though please let me know and i can put some form of tutorial together.

Cheers

James.