February 9, 201412 yr Hi All, I am still relatively new to unRAID and I am in the process of setting up a home media server. I managed to get the system up and running with 5 storage drives and 1 parity. Life is good. I figured it was time to add some security to the system. My troubles started when I could not find the option for User Level Security. I went into "Shares" under the unRAID Main menu and clicked on a share. I changed a setting from visible to hidden. It promptly booted me out of unRAID Main (I can still access unMenu) and won't let me back in. No password prompt or anything. I am pretty stuck guys... Anyone know a way out? Thanks Frank
February 9, 201412 yr See here: http://lime-technology.com/wiki/index.php?title=Console#To_cleanly_Stop_the_array_from_the_command_line
February 9, 201412 yr Create a 'userid' on the 'Users' tab FIRST, then add the security. When you click on the 'shares' tab, click on each share that your newUser should be able to access. If 'newUser' should be able to access 'movies' via SMB for example, then click on the share tab, click on movies, and tic 'on' that user's ability. In unRAID v.5 the userid 'root' can perform admin functions, including setting permissions for shares.BUT, 'root' cannot actually access the data in a share. Only each share's authorized users can do that.
February 10, 201412 yr Author OK, I apologize, but I'm still a little confused. How do I access the unRAID Main menu now that I have shut myself out? It says "the server refused the connection." I did create a user name and password before adding the security. But there is nowhere to log in. It doesn't prompt me for username/password, it just refuses the connection. I guess I really screwed this one up!
February 10, 201412 yr As they say, 'Don't Panic!' Sounds like 2 problems: 1. the web page login 2. the usershare access #1. Try clearing cache and restarting your browser. (or as dgaschk suggests, try a different browser) If you can't get to the admin page, try typing unRAID server's IP address into the URL address field. (something like: 192.168.1.xx) #2. Your 'root' login may have been stored on your PC, and is being used to automatically connect to your new usershare. Look for 'Credentials' in your control panels. ("Keychain" on a Mac.) Delete the old 'root' login. In windows explorer (finder on a mac), connect to the unRAID user share, and Access your new usershare with the new user name and password. Report back if that doesn't work.
February 10, 201412 yr Author OK, I tried connecting on two laptops using three browsers on one (Chrome, IE and Firefox) and two on the other (IE and Chrome). Tried connecting both through unmenu (which connects fine) and then unRAID Main (which doesn't) and the IP address. No joy. Went into windows credentials and there was nothing about root. I dug out my monitor and keyboard. Is this something I am going to have to fix using the command line?
February 10, 201412 yr Author Just to give a little more info on the problem, I went into my network places and when clicking on a share from the unRaid system (that I had mapped as the Z drive) it prompts me for a username/password. It accepts the username/password, but won't let me in because I stopped the array from unMenu before I knew you could not restart the array from unMenu...
February 10, 201412 yr Since the array is stopped, and you have access to unmenu, I'd try restarting the machine using unmenu.
February 10, 201412 yr Author OK, I manually powered down the machine and then started it back up. This time when I tried to access the unRAID Main menu, I was prompted with a username/password request. Sweet. But I am more or less back to the beginning; where the heck is the User Level Security option? I have checked the settings tab, the users tab and the shares tab both with the array started and stopped and no luck. Also, it looks like my SMB Security settings under the Shares tab have defaulted back to "Yes" for Export (I changed them to Yes(Hidden)) which originally locked me out. Thoughts?
February 10, 201412 yr Search the forum. I don't remember exactly. I had the same problem. You have to delete the password files on your unRAID-stick. Then you can access the webgui again and set users and passwords properly.
February 10, 201412 yr From http://lime-technology.com/wiki/index.php/UnRAID_Manual_5 Technical notes All user access restrictions on shares is defined for each share on the Shares page. Each new user is automatically given a unique uid , and unique gid (group name same as the user name). However, all objects (files/directories) created in shares will be owned by root . Only root can access the System Management Utility, and log in to the system console or telnet session. The configured users do not have actual home accounts on the server. The following files are maintained in the config directory on the Flash when User level security is enabled: config/passwd - contains user names and encrypted passwords config/group - contains groups created for users config/smbpasswd - contains user names and SMB encrypted passwords Shutdown as normally as you can. :)Pull the flash out and pop it onto your PC. Copy it completely to your PC as a backup. Then:Run checkdisk on the flash, just in case. Then edit the above files. You'll see the lines containing your custom userids. Just delete those lines. Be sure to use a text editor with *nix compatible line endings. (Mac is okay, Notepad++ or similar for windows (not the builtin notepad))
February 11, 201412 yr You can delete the password files: config/passwd - contains user names and encrypted passwords config/group - contains groups created for users config/smbpasswd - contains user names and SMB encrypted passwords They will be recreated.
February 12, 201412 yr Author Hello, Just thought I would update everyone. After I stopped the array from unMenu and restarted the machine using the good ol' power switch, the setting that caused me the issue (Shares Tab, SMB Security Settings, Export: Yes(Hidden)) reverted back to "Yes (not hidden)" and I was once again able to access everything. Still feeling like I was "missing" some security options, I noticed a setting that seemed strange (Settings Tab, SMB, Enable SMB: Active Directory). I changed this to "Workgroup" and viola, security settings galore. I don't remember changing this to "Active Directory." Maybe it happened when I upgraded to pro. Anyway, if anyone ever can't find security settings, check the "Enable SMB" setting! Thanks for managing this forum and all the good info on here! Frank
Archived
This topic is now archived and is closed to further replies.