{"id":2040,"date":"2018-03-20T21:34:44","date_gmt":"2018-03-20T21:34:44","guid":{"rendered":"http:\/\/hauweele.net\/~gawen\/blog\/?p=2040"},"modified":"2018-03-20T21:34:44","modified_gmt":"2018-03-20T21:34:44","slug":"samba-denied-on-freenas","status":"publish","type":"post","link":"https:\/\/hauweele.net\/~gawen\/blog\/?p=2040","title":{"rendered":"Samba denied on FreeNAS"},"content":{"rendered":"<p>If you recently discovered that some of your authenticated samba shares on your FreeNAS refuse to well authenticate. And maybe you did your own investigation and found that it failed with <code>NT_STATUS_NO_SUCH_USER<\/code>. Do not worry, you are not alone!<\/p>\n<p>From what I understand, the last update changed the constraints on the user accounts metadata. In particular it seems that the <i>E-Mail<\/i> field must now point to a real e-mail address (something@domain) and cannot just be an alias to another local user.<\/p>\n<p>Don&#8217;t know if that&#8217;s intended or not or why it would be. Going to IRC right now to find out.<\/p>\n<p>Long story short, users that don&#8217;t match the new constraints are not recognized anymore by samba (and probably other services too), hence the permission denied and <code>NT_STATUS_NO_SUCH_USER<\/code>. So for those user using a local alias as E-Mail, use a fully qualified E-Mail. That will fix the shares. However it seems that <code><i>\"user\"<\/i>@localhost<\/code> doesn&#8217;t work either. And you will also have to retype their password.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you recently discovered that some of your authenticated samba shares on your FreeNAS refuse to well authenticate. And maybe you did your own investigation and found that it failed with NT_STATUS_NO_SUCH_USER. Do not worry, you are not alone! From &hellip; <a href=\"https:\/\/hauweele.net\/~gawen\/blog\/?p=2040\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[881,971,974,972,973,464],"class_list":["post-2040","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-freenas","tag-nt_status_no_such_user","tag-permission-denied","tag-samba","tag-smb","tag-user"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2040"}],"version-history":[{"count":0,"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2040\/revisions"}],"wp:attachment":[{"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hauweele.net\/~gawen\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}