I have been running UNRAID for years now with no problems at all but 9 days ago I found the server unresponsive and black screened so I had to power off/on.

 

Since then I have noticed that my Windows AD domain accounts have lost access to many shares & directories - although not all of them.

 

I also tried to leave & re-join the domain to reset things in the Settings | SMB page but pressing Leave does nothing and UNRAID is still joined to the domain. 

 

I tried creating a new share that only my AD account had RW access to in the private SMB share. This seemed to work and I was able to access the share and create folders and files. But weirdly the files are set to be owned not by me but by a different owner - my account is geoff but the new file and folder I created is owned by user jellyfin. I also note that Windows shows that both everyone and jellyfin user has been given RW access to these files and directories - but the SMB share is set so only the geoff account has RW access.

 

root@UNRAID01:~# ls -laR /mnt/user/accesstest
/mnt/user/accesstest:
total 0
drwxrwxrwx 1 unraid    domain users 20 Jan 26 00:38 ./
drwxrwxrwx 1 776996452    776995329  6 Jan 25 23:59 ../
drwxrwxrwx 1 jellyfin  domain users 24 Jan 26 00:38 new_folder/

/mnt/user/accesstest/new_folder:
total 4
drwxrwxrwx 1 jellyfin domain users 24 Jan 26 00:38 ./
drwxrwxrwx 1 unraid   domain users 20 Jan 26 00:38 ../
-rw-rw-rw- 1 jellyfin domain users 14 Jan 26 00:00 test_doc.txt

 

What do I need to do to fix this?

Edited January 26, 20224 yr by Geoff Bland

Does anyone have any ideas on this?

 

Is there anyway to check that UNRAID is correctly syncing with Active Directory?

Anyway to reset the permissions on the shares and files - doing it form the web GUI does not seem to work.

 

I have now resolved this. These are the steps that I took that fixed this issue - I am not sure if all of them needed to be done.

 

First I created a new AD domain user for UNRAID and gave it Domain Admin rights.

I then updated the UNRAID SMB settings with the new user and password. The settings page did not show this had been accepted and if the Leave Domain button is pressed the web page does not register the domain is now left - that makes it impossible to re-join the domain without restarting the UNRAID server. This is a bug.

I then restarted the UNRAID server and it re-joined the domain automatically with the new AD account I had given it (this was a bit of a surprise as I though I had left it disconnected from the domain).

 

Now all access rights are back. Some files are marked with access to the wrong users - those added over the days we had problems. But these can be detected and corrected to have the correct permissions.

 

So to recap, to fix:

 

- create new AD domain user for UNRAID

- on SMB settings, leave domain then update user name and password to new AD domain user

- reboot UNRAID

- UNRAID should restart and use the new AD user and join the domain

- check permissions and users on recent added files and correct as required