User:Mauirixxx/Scratch - Revision history

Mauirixxx: new note

2014-04-25T20:46:11Z

new note

Mauirixxx: added note about removing user from domain admins. created user named freenasAdmin

2014-04-24T21:59:41Z

added note about removing user from domain admins. created user named freenasAdmin

Mauirixxx: more bolded notes

2014-04-24T21:26:30Z

more bolded notes

Mauirixxx: added "Use syslog" and note about "Authentication Model"

2014-04-24T21:23:28Z

added "Use syslog" and note about "Authentication Model"

Mauirixxx: formatting hell :/

2014-04-24T20:13:14Z

formatting hell :/

New page

Setup:
Host System: Dell XPS-8500 (Core i7-3770, 32GB ram, 240GB external SSD for virtual machines)
VirtualBox
pfSense (router) (4GB ram, 2 vNIC's, WAN = bridged adapter (DHCP), LAN = Internal Network - Static IP 10.10.10.1))
Windows Server 2008 (Active Directory server) (3GB ram, 1 vNIC = Internal Network, Static IP 10.10.10.3)
FreeNAS-9.1.1-RELEASE-x64 (a752d35) (8GB ram, 1vNIC = Internal Network, Static IP 10.10.10.2)
Windows 7 Professional x64 (2GB ram, 1 vNIC = Internal Network, DHCP)
FreeNAS-9.2.1.4.1-RELEASE-x64 (fec915c) (8GB ram, 1vNIC = Internal Network, Static IP 10.10.10.4)

Create Active Directory domain: example-domain.net

*****
Create FreeNAS specific user (logon name): freenas
(After thinking about this, it might be a good idea to name the user freenasAdmin or something like that. As its for documentation it might make it easier for people following the guide not to confuse it with the FreeNAS computer.)
*****
Password: HorseBattery2014
*****
Add user to group: "Domain Admins" ??
(I would not do this as there is absolutely no need for it. The account only needs Full Control permission to the FreeNAS computer object in Active Directory. You'll need to change the AD console to show advanced features to get the security tab to show so you can add an entry for the "freenas" user you create into the security permissions on the FreeNAS computer object.)
*****

Active Directory Server & DNS IP: 10.10.10.3
Create DNS "A" record - freenas 10.10.10.2 & create associated PTR record
Create DNS "A" record - freedom 10.10.10.4 & create associated PTR record

Install FreeNAS
Network
Global Configuration
Hostname: freenas
Domain: example-domain.net
IPv4 Default Gateway: 10.10.10.1
Nameserver 1: 10.10.10.3
"Save"

System
NTP Servers
View NTP Servers
Delete all 3 default time servers
*****
Add NTP Server: 10.10.10.3
(Make sure to set the 10.10.10.3 server as the "preferred" target.)
*****
Settings
General
Timezone: Pacific/Honolulu
Directory Service: Active Directory
"Save"

Storage
Volumes
ZFS Volume Manager
"Create your volume instructions here" (for this example I named it plexdata)
/mnt/plexdata
Create ZFS Dataset
Dataset Name: downloads
Compression level: Off
Enable atime: Inherit
ZFS Deduplication: Off
v9.2.1.4.1 specific - Share type: Windows

Services
Directory Services
Active Directory
Domain Name (DNS/Realm-Name): example-domain.net
NetBIOS Name: freenas
Workgroup Name: EXAMPLE-DOMAIN
*****
Administrator Name: freenas
(Possibly update username like discussed above)
*****
Administrator Password: HorseBattery2014
Confirm Administrator Password: HorseBattery2014
Advanced Mode
Use Default Domain: checked
CIFS
*****
Authentication Model: Local User
(I don't see this setting on my system. Maybe its only available on older builds?)
*****
NetBIOS name: freenas
Workgroup: EXAMPLE-DOMAIN
Description: FreeNAS Test Server
DOS charset: CP437
UNIX charset: UTF-8
Log Level: Minimum
Local Master: unchecked
Time Server for Domain: unchecked
Guest Account: nobody
File Mask: (leave this field blank)
Directory Mask: (leave this field blank)
EA Support: checked
Support DOS File Attributes: checked
Allow Empty Password: unchecked
Auxiliary Parameters: (leave this field blank)
Enable home directories: unchecked
Enable home directories browsing: unchecked
Home directories: (leave this field blank)
Homes auxiliary parameters: (leave this field blank)
Unix Extensions: checked
Zeroconf share discovery: checked
Hostnames lookups: checked
v9.2.1.4.1 specific: Server minimum protocol: ---------
Server maximum Protocol: SMB3
Allow execute always: checked
Control Services
Directory Services - turn off, then turn on
CIFS - turn off, then turn on
(note: In v9.2.1.4.1 both of these services were turned off, turning on "Directory Services" takes awhile to start, then automatically turns on "CIFS" as well)

Sharing
Windows (CIFS) Shares
Add Windows (CIFS) Share
Name: downloads
Comment: Internet Downloads
Path: /mnt/plexdata/downloads
Browsable to Network Clients: checked
Leave everything else unchecked
v9.2.1.4.1 specific: Inherit ACL's: checked

Shell
Type the following: /usr/local/www/freenasUI/tools/winacl.sh -o administrator -g "domain admins" -p /mnt/plexdata/downloads -r
v9.2.1.4.1 specific: The above shell command is no longer be needed

Storage
Volumes
/mnt/plexdata
/mnt/plexdata/downloads
Change Permissions
Verify the following are filled in:
*****
Owner (user): administrator
Owner (group): domain admins
(These should begin with the NetBIOS domain name of the Active Directory domain. i.e. ExAMPLE-DOMAIN\Administrator)
*****
Mode:
Read: Owner, Group, Other
Write: Owner, Group
Execute: Owner Group, Other
Type of ACL: Windows
Set permission recursively: unchecked

On Windows 7 client, in Windows Explorer type \\freenas to view the "downloads" file share, verify write ability by creating a folder.

Test complete.

@@ Line 74: / Line 74: @@
                   Administrator Password: HorseBattery2014
                   Confirm Administrator Password: HorseBattery2014
-                      Advanced Mode
+                      Advanced Mode (may or may not need to actually specify use default domain below)
                           Use Default Domain: checked
           CIFS

@@ Line 4: / Line 4: @@
               pfSense (router) (4GB ram, 2 vNIC's, WAN = bridged adapter (DHCP), LAN = Internal Network - Static IP 10.10.10.1))
               Windows Server 2008 (Active Directory server) (3GB ram, 1 vNIC = Internal Network, Static IP 10.10.10.3)
-              FreeNAS-9.1.1-RELEASE-x64 (a752d35) (8GB ram, 1vNIC = Internal Network, Static IP 10.10.10.2)
+              FreeNAS-9.1.1-RELEASE-x64 (a752d35) (8GB ram, 1 vNIC = Internal Network, Static IP 10.10.10.2)
               Windows 7 Professional x64 (2GB ram, 1 vNIC = Internal Network, DHCP)
-              FreeNAS-9.2.1.4.1-RELEASE-x64 (fec915c) (8GB ram, 1vNIC = Internal Network, Static IP 10.10.10.4)
+              FreeNAS-9.2.1.4.1-RELEASE-x64 (fec915c) (8GB ram, 1 vNIC = Internal Network, Static IP 10.10.10.4)
   Create Active Directory domain: example-domain.net
@@ Line 13: / Line 14: @@
   Create FreeNAS specific user (logon name): freenas
   (After thinking about this, it might be a good idea to name the user freenasAdmin or something like that. As its for documentation it might make it easier for people following the guide not to confuse it with the FreeNAS computer.)
   *****
       Password: HorseBattery2014
@@ Line 18: / Line 20: @@
       Add user to group: "Domain Admins" ??
   (I would not do this as there is absolutely no need for it. The account only needs Full Control permission to the FreeNAS computer object in Active Directory. You'll need to change the AD console to show advanced features to get the security tab to show so you can add an entry for the "freenas" user you create into the security permissions on the FreeNAS computer object.)
   *****

@@ Line 108: / Line 108: @@
               Directory Services - turn off, then turn on
               CIFS - turn off, then turn on
-                  (note: In v9.2.1.4.1 both of these services were turned off, turning on "Directory Services" takes awhile to start, then automatically turns on "CIFS" as well)
+                  (note: In v9.2.1.4.1 both of these services were turned off, turning on "Directory Services" takes awhile to start ('''due to joining the domain'''), then automatically turns on "CIFS" as well)
       Sharing
@@ Line 118: / Line 118: @@
                   Browsable to Network Clients: checked
                       Leave everything else unchecked
-                          v9.2.1.4.1 specific: Inherit ACL's: checked
+                          v9.2.1.4.1 specific ('''possibly new to v9.2.x'''): Inherit ACL's: checked
       Shell

@@ Line 77: / Line 77: @@
               Authentication Model: Local User
   (I don't see this setting on my system. Maybe its only available on older builds?)
   *****
               NetBIOS name: freenas
@@ Line 84: / Line 85: @@
               UNIX charset: UTF-8
               Log Level: Minimum
               Local Master: unchecked
               Time Server for Domain: unchecked