NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

WLauHK's avatar
WLauHK
Aspirant
Mar 24, 2022
Solved

ReadyNAS 4312v2 - Web Admin Page Management

Dear Sir,

 

May I know if the web admin page management allows to set a role who can only manage the snapshots or monitor the NAS performance, but cannot browser or download the files under shares?

 

Thank you in advance.

 

Best regards,

Winnie 


  • Sandshark wrote:

    But to answer your question, there is no such user type on a ReadyNAS.

    Yeah.  There is no way to limit what an admin can access.

     

    WLauHK - it might be helpful if you gave us more details on what you need to accomplish.

     

    If you need to ensure that some files/folders are kept completely private, then setting up an iSCSI LUN, and putting iSCSI clients on the PCs would accomplish that.  TrueCrypt containers would be another way.  Those approaches work because the encryption key for the storage repository is stored in the clients, and is not on the NAS.  One aspect is that the files can't be shared - only one user can access the repository at a time.

4 Replies

Replies have been turned off for this discussion
  • Sandshark's avatar
    Sandshark
    Sensei - Experienced User

    If "managing snapshots" means being able to browse them, then that user will effectively have access to all files except those in shares without snapshots.  And I'm not sure if it's even possible in BTRFS to allow other management without the ability to browse them (for file restoration purposes).

     

    But to answer your question, there is no such user type on a ReadyNAS.  There are Linux based tools you can install to help monitor the NAS and have them put their output in a share available to specific users or even send them to another device on the network.  I use HDSentinel in a way similar to that because the GUI does not give me all the drive info for my non-Netgear SAS expansion chassis.  And there are also built-in ones (like rnutil and BTRFS tools) you can use in the same way, but you have to set all that up via SSH and scripts and schedule them.

     

    Some useful command for that:

    rnutil create_system_log -o [path_and_name_of_file]>.zip
    df -h >[path_and_name_of_file].txt
    btrfs fi usage -T / >>[path_and_name_of_file].txt
    btrfs fi usage -T /data >>[path_and_name_of_file].txt
    btrfs fi show >>[path_and_name_of_file].txt
    rnutil get_disk_info >>[path_and_name_of_file].txt

     

    And if running HDSentinel:

    /apps/hdsentinel/HDSentinel -solid >>[path_and_name_of_file].txt
    /apps/hdsentinel/HDSentinel -r [path_and_name_of_file].html -html

     

    I have the file names created based on the time and date and include commands later in the script that clean out old stuff. , I also send the reports to another NAS via rsync so I have the reports stored elsewhere if the NAS quits working.

     

    But, a lot of folks get a NAS instead of a generic Linux server because they don't want to deal with this type of stuff.

    • StephenB's avatar
      StephenB
      Guru - Experienced User

      Sandshark wrote:

      But to answer your question, there is no such user type on a ReadyNAS.

      Yeah.  There is no way to limit what an admin can access.

       

      WLauHK - it might be helpful if you gave us more details on what you need to accomplish.

       

      If you need to ensure that some files/folders are kept completely private, then setting up an iSCSI LUN, and putting iSCSI clients on the PCs would accomplish that.  TrueCrypt containers would be another way.  Those approaches work because the encryption key for the storage repository is stored in the clients, and is not on the NAS.  One aspect is that the files can't be shared - only one user can access the repository at a time.

      • WLauHK's avatar
        WLauHK
        Aspirant

        Thanks for your suggest.

        Setting up iSCSI lun and clients is a way, but it may not suitable for large amount of data. It takes longer time for data recovery. 

         

         

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More