Not able to communicate with smb shares from freenas

UCS - Univention Corporate Server
4

Hi @rich45,

there are several posts relating Freenas and UCS - but some of them are in german. But the short version is:

  1. create a certificate for freenas on UCS like this: How to create an UCS-CA signed certificate for a non-UCS system within domain
  2. copy this cert to freenas (is going to ‘certificates’ in the Freenas-GUI) as well as the UCS CAcert (is going to ‘CAs’ in the Freenas-GUI). I’m still using the old Freenas GUI.
  3. In Freenas, go to the ‘directory service’ tap (back-translation from german, but something like this). Enter the values for ‘kerberos realm’.
  4. in Freenas, still ‘directory service’, Enter the values for the UCS Administrator in the ‘active directory’ tab. This is straight foreward, just use ‘tls’ and select the cert you entered in step 2. Select the realm too.
  5. before you join the UCS like this - consider the possibility to add the freenas server in the UCS GUI as new computer - like this, perhaps you can also skip step 1 as the certs are generated automatically. I chose the role UCS - member server - although this is experimental and you can not expect to select any strictly UCS related setting in the advanced setting - you can (for the last years) add shares from freenas to UCS Domain. If you don’t make a computer account before joining UCS, Freenas will show up after the join as a windows computer.
  6. Join UCS from Freenas-GUI.

best,
Bernd