After upgrading to 11.17 (from - I think - 11.14), I'm hitting some permissions errors syncing files from Windows (Server 2016) to a TrueNAS (ver 12.0u8 - recently upgraded from 11.3) CIFS/SMB share.
I'm running FFS the same way I was with the old version - in fact using the same config files. I have the "Copy DACL, SACL, Owner, Group" option enabled (the file ACLs are critical to my application), and running as Administrator with elevated privs.
Post-upgrade, I'm hitting multiple permissions problems:
ERROR_ACCESS_DENIED: Access is denied. [SetFileSecurity]
I am able to manually create a file or dir in the same place that FFS complains about using the same account.
Anyone else run across this? Any ideas to help troubleshoot very much appreciated.
Thanks!
[Resolved] After upgrade, getting ERROR_ACCESS_DENIED: Access is denied. [SetFileSecurity]
- Posts: 14
- Joined: 17 Aug 2020
- Posts: 4055
- Joined: 11 Jun 2019
That setting is not tied to config files, it is for FFS. Make sure it is still enabled.
- Posts: 14
- Joined: 17 Aug 2020
Yes, it is still enabled. Program settings appear to have carried over to the new version.
- Posts: 4055
- Joined: 11 Jun 2019
If you are running FFS as admin, you may not be using the same account the way you think you are. What if you try version 11.14 again?
- Posts: 14
- Joined: 17 Aug 2020
Thanks for the replies; this is now resolved.
The problem was with TrueNAS (actually Samba) and not FreeFileSync.
Apparently the new version of Samba that TrueNAS 12 ships with doesn't allow unresolvable Windows ACL SIDs. I had some files and directories with SIDs leftover from an old domain trust. Older versions of Samba must have just ignored these, but the new version won't permit setting them. Once I cleaned the ACLs by removing the old SIDs, all was well again.
Posting in case it helps someone else.
Thanks!
The problem was with TrueNAS (actually Samba) and not FreeFileSync.
Apparently the new version of Samba that TrueNAS 12 ships with doesn't allow unresolvable Windows ACL SIDs. I had some files and directories with SIDs leftover from an old domain trust. Older versions of Samba must have just ignored these, but the new version won't permit setting them. Once I cleaned the ACLs by removing the old SIDs, all was well again.
Posting in case it helps someone else.
Thanks!
- Posts: 4055
- Joined: 11 Jun 2019
Gotta love Samba issues lmao