Hi.

I want to create a shared file area for photos.

SMB is set up with Active Directory.

The idea is that everyone and everything should use this folder to access photos. Docker containers like Filerun and Photoprism, shares from Win10, etc.

But when I install the Filerun container and try to point the home directory to this share, I get an error:

 

Failed to create folder.
(mkdir(): Permission denied)

 

Is this possible to achieve? Can a docker container log in as a different user perhaps?

 

Thanks.

What are you specifying as the host path for that container? 

 

Specifically for Filerun I think you mean the parameter called /user-files/ and the host path for that points to /mnt/user/appdata/docker-containers/filerun/data. All users have their own directory under here, where they store their files.

The shared file library is under another Unraid created share in /mnt/user/shares/felles, and this is what i want for the joint (common?) user. That user is meant to share that folder for all other Filerun users.

I don't use that docker, but are you wanting it to store files here?

1 hour ago, Dal said:

/mnt/user/shares/felles

It won't know anything about that host path unless it is mapped to a container path.

1 hour ago, trurl said:

It won't know anything about that host path unless it is mapped to a container path.

Yeah, it found the path when changing the host path to /mnt/user/shares/, but there is no write access though.

So I was hoping that the docker container could run as another user. Or maybe there is a way in the SMB settings to give the default docker user access.

I read a thread earlier today that mentioned that I could set permissions in the app settings, but I cannot find that option.

Here is the thread:
 

 

Edited July 22, 20223 yr by Dal

Some additional info that puzzles me:

I have a local user called nc_admin-local, and one of my docker containers are owned and ran as that user. But I haven't done anything to achieve this:
 

drwxrwxrwx 1 nc_admin-local  1000 316 Jul 22 09:45 amp/
drwxrwxr-x 1 nobody         users  56 Jul 21 23:32 binhex-krusader/
drwxrwxrwx 1 nobody         users 114 Jun  9 14:47 mariadb/
drwxrwxrwx 1 nobody         users 142 Jun  9 15:07 nextcloud/
drwxrwxrwx 1 nobody         users  56 Jul  7 14:06 plex/
drwxr-xr-x 1 nobody         users 242 Jul 22 20:52 radarr/
drwxrwxrwx 1 nobody         users 222 Jun  9 14:58 swag/

 

How can this be?

And shouldn't it be possible to give nc_admin-local rights to /mnt/user/shares/felles and run the filerun container as nc_admin-local?

 

thanks

Do you mean the container path

5 hours ago, Dal said:

/user-files/

is now mapped to 

1 hour ago, Dal said:

/mnt/user/shares/

?

 

How is your Shares user share configured?

 

Yes, the /user-files/ is now mapped to /mnt/user/shares

 

The user share is configured to Enabled:

 

 

Thanks

No, you apparently have a user share named shares. I was asking about it specifically since that is the user share you are talking about ( /mnt/user/shares )

Hmm, I thought you were pointing me to the manual telling me how to set up Global share settings.

Is this what you are looking for?

 

That is a private share for which you have given no access.

 

Why do you want that share to stay on cache?

15 minutes ago, Dal said:

pointing me to the manual

Some words and phrases in the forum are automatically converted to links, such as user share, check filesystem, diagnostics

On 7/22/2022 at 11:43 PM, trurl said:

That is a private share for which you have given no access.

 

Not entirely true. Active Directory users seems to have access just fine.

But when changing Security to "Secure" it seems that docker containers can access the share too.

But it seems that the docker containers have to create the subfolders first. If they are created in Windows for example, docker containers don't get access.

What a mess.

 

On 7/22/2022 at 11:43 PM, trurl said:

Why do you want that share to stay on cache?

 

Isn't it wise to have it on cache for speed?

Doesn't the data get written to the storage disk at all when doing this?

Maybe I just doesn't understand how the cache disk works.

 

Thanks again

I find the Active Directory integration messy and confusing, especially when involving docker containers as well. I think it would be easier if it was possible to run the containers as another user that AD recognizes.

 

I'm wondering if it's just as easy to switch this around; Remove AD integration from SMB -> Create a local user in Unraid -> Put that local user into Credential Manager in Windows Server