Chỉnh sửa SMB Share

Edit SMB Share on TrueNAS SCALE 24.10 

Basic

• Path: Select pool, dataset, or directory to share.
• Name: Enter a name for the share.
• Purpose: Select a preset configuration for the share. This applies predetermined values and disables changing some share options.
• No presets
• Default share parameters
• Basic time machine share
• Multi-user time machine
• Multi-protocol (NFSv4/SMB) share
• Private SMB Datasets and Shares
• SMB WORM. Files become readonly via SMB after 5 minutes
• Description: Description of the share or notes on how it is used.
• Enabled: Enable this SMB share. Unset to disable this SMB share without deleting it.

Access

• Enable ACL: Enable ACL support for the SMB share.
• Export Read Only: Prohibits writes to this share.
• Browsable to Network Clients: Determine whether this share name is included when browsing shares. Home shares are only visible to the owner regardless of this setting.
• Allow Guest Access: Legacy feature.
• Privileges are the same as the guest account. Guest access is disabled by default in Windows 10 version 1709 and Windows Server version 1903. Additional client-side configuration is required to provide guest access to these clients.
• MacOS clients: Attempting to connect as a user that does not exist in TrueNAS does not automatically connect as the guest account. The Connect As: Guest option must be specifically chosen in MacOS to log in as the guest account. See the Apple documentation for more details.
• Access Based Share Enumeration: Restrict share visibility to users with read or write access to the share. See the smb.conf manual page.
• Host Allow:
• Enter a list of allowed hostnames or IP addresses. Separate entries by pressing Enter. A more detailed description with examples can be found here.
• If neither *Hosts Allow* or *Hosts Deny* contains an entry, then SMB share access is allowed for any host.
• If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow hosts on the *Hosts Allow* list.
• If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all hosts that are not on the *Hosts Deny* list.
• If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts that are on the *Hosts Allow* list.
• If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list, then allow it.
• Hosts Deny:
• Enter a list of denied hostnames or IP addresses. Separate entries by pressing Enter. If neither *Hosts Allow* or *Hosts Deny* contains an entry, then SMB share access is allowed for any host.
• If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow hosts on the *Hosts Allow* list.
• If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all hosts that are not on the *Hosts Deny* list.
• If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts that are on the *Hosts Allow* list.
• If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list, then allow it.

Audit Logging

• Enabled: Controls whether audit messages will be generated for the share. Note: Auditing may not be enabled if SMB1 support is enabled for the server.
• Watch List: List of groups for which to generate audit messages. Keep this list empty to Watch All.
• Ignore List: List of groups to ignore when auditing. If conflict arises between Watch List and Ignore List (based on user group membership), then Watch List will take precedence and ops will be audited.

Other Options

• User as Home Share: Legacy feature. Allows the share to host user home directories. Each user is given a personal home directory when connecting to the share which is not accessible by other users. This allows for a personal, dynamic share. Only one share can be used as the home share.
• Time Machine: Enable Time Machine backups on this share
• Legacy AFP Compatibility: This controls how the SMB share reads and writes data. Leave unset for the share to behave like a normal SMB share and set for the share to behave like the deprecated Apple Filing Protocol (AFP). This should only be set when this share originated as an AFP sharing configuration. This is not required for pure SMB shares or MacOS SMB clients.
• Enable Shadow Copies: Export ZFS snapshots as Shadow Copies for VSS clients.
• Export Recycle Bin: Select to enable. Deleted files from the same dataset move to a Recycle Bin in that dataset and do not take any additional space. Recycle bin is for access over SMB protocol only. The files are renamed to a per-user subdirectory within .recycle directory at either (1) root of SMB share (if path is same dataset as SMB share) or (2) at root of current dataset if we have nested datasets. Because of (2) there is no automatic deletion based on file size.
• Use Apple-style Character Encoding: By default, Samba uses a hashing algorithm for NTFS illegal characters. Enabling this option translates NTFS illegal characters to the Unicode private range.
• Enable Alternate Data Streams: Allows multiple NTFS data streams. Disabling this option causes MacOS to write streams to files on the filesystem.
• Enable SMB2/3 Durable Handles: Allow using open file handles that can withstand short disconnections. Support for POSIX byte-range locks in Samba is also disabled. This option is not recommended when configuring multi-protocol or local access to files.
• Enable FSRVP: Enable support for the File Server Remote VSS Protocol (FSVRP). This protocol allows RPC clients to manage snapshots for a specific SMB share. The share path must be a dataset mountpoint. Snapshots have the prefix fss- followed by a snapshot creation timestamp. A snapshot must have this prefix for an RPC user to delete it.
• Path Suffix: Appends a suffix to the share connection path. This is used to provide unique shares on a per-user, per-computer, or per-IP address basis. Suffixes can contain a macro. See the smb.conf manual page for a list of supported macros. The connectpath **must** be preset before a client connects.
• Additional Parameters String: String of additional smb4.conf parameters not covered by the system's API.