Re-Enabling "macOS interoperability" and TimeMachine based GUI settings if "Enable SMB" is set to "Yes (Active Directory)"


Reini

Recommended Posts

If SMB Settings "Enable SMB" is set to "Yes (Active Directory)", which means "AD join status" is "Joined", then the setting "Enhanced macOS interoperability" setting to "Yes" and the "SMB Security Settings" at "Export" setting to "Yes/TimeMachine" doesn't work for using it on Apples Time Machine.

(AFP is also extremely instabil in Active Directory Services (ADS) for more (4+) Macs doing Time Machine Backups. If good luck, then it works some weeks. Next is unRAID's note: "Please note that AFP is deprecated, please use SMB instead.". This will prevent from using AFP - but it's OK.)

At the moment, the only way to get SMB based Time Machine backup running in ADS environments with more Mac-Users is to add these lines to "Samba extra configuration:"

Quote

 

# Samba extra configuration/settings

fruit:aapl = yes

fruit:resource = file

fruit:metadata = netatalk

fruit:locking = none

fruit:encoding = native

fruit:nfs_aces = no

#

# Share specific settings

fruit:time machine = yes

fruit:time machine max size = 4T

 

This must be done, because if "Enable SMB" is set to "Yes (Active Directory)", all "macOS interoperability" settings will be ignored from unRAID OS - so far as I remember from Tom (cause of ADS problems in the past).

 

With the quoted settings above, we are running SMB based Time Machine backups in an ADS environment long time without any issues.

 

But there is one problem, because these settings are global, the option "fruit:time machine = yes" and "fruit:time machine max size = 4T" is valid for ALL shares. If Macs are connecting to any other share, the share limit is 4TByte for ALL shares. Leaving the option "fruit:time machine max size = 4T" is not an option, because Time Machine is taking ALL available storage

 

So, please re-enable the "macOS interoperability" and TimeMachine based GUI settings if ADS is active (SECURITY="ads" in /boot/config/ident.cfg) to prevent from manual adding "Samba extra configurations".

 

Thanks in advance.

  • Like 2
Link to comment
  • 1 month later...
  • 1 month later...
  • 8 months later...
  • 2 months later...

I was hoping to get this "Feature Requests", which was already implemented in the past, reactivated in the actual 6.10.x Version.

But after 15 month, nothing happens. So, I still need to using "User Scripts" to get the /etc/samba/smb-shares.conf manipulated.

This is not good, really "☹️"

Edited by Reini
Link to comment
On 3/12/2022 at 7:16 PM, andrelung said:

+1 on this.
Did you ever get it to work without the global changes? I am currently experimenting with https://hub.docker.com/r/mbentley/timemachine - but missing the AD authentification makes this hard for production use :/

No. Only with the described manual changes, it's possible to get it to work - including AD authentication - without any issues.

Edited by Reini
Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.