Newbie to OMV, but very seasoned Microsoft Windows administrator.
I am replacing an solid home server (Windows Server 2008 VM on a VMware ESX host on Dell enterprise hardware). Yes, it is no longer supported and a security risk, thus the OMV install...
I built a Raspberry Pi 5 have have used the scripted OMV install for Raspberry OS Lite (Debian). I have begun the Docker install and I am following the newbie guides on omv-extras.org (I will install Docker containers for the apps currently running on the Win2K8 server and will use OMV SMB/CIFS for the shared data on this network).
My Windows clients and groups all are operating in a workgroup. The clients have identical local user accounts which map exactly to the Windows server local user accounts and groups. The passwords and character sensitive usernames match. I'm replicating the setup on OMV.
After reading the wiki.omv-extras.org and docs.openmediavault.org it seems as if my single SMB share with different subfolder permissions is not an eligible configuration. So many warnings about avoiding ACLs and just keeping things simple. For the end-user (my family) they have grown accustomed to simple, indeed. One share. They browse up and down a list of subfolders for home directories, household directories, music, photos, etc., with appropriate read-only, no access, or read-write as necessary.
Also, my Docker container apps will need to have access to some of the subfolders, I assume dedicated "appuser" user accounts can be granted appropriate access along with the Windows users.
Can I create JUST ONE top-level network share on OMV in the SMB/CIFS service, but set Linux (local) Shared Folder permissions all from within the OMV GUI? I would rather not fiddle with CLI and "void the warranty" of OMV. If so, I can't find this use case in the documentation. I'd rather not retrain my family (and break their shortcuts) to nine or ten new SMB network shares just to fix what is a very easy, simple permissions setup under Windows server...
| Want this: (one SMB network share "data") - Microsoft "whack \" is deliberate) | Not this: (12 shares!) |
| data\ data\business data\financial data\pictures data\household data\downloads data\music data\fing data\george data\barb data\jenny data\ben data\mike | business
financial pictures household downloads music fing george barb jenny ben mike |
P.S. I have searched this forum and can't find a similar question.