1import{Mh as e}from"./chunk-CPOZEFYP.js";var o={fieldset_target_basic:"Basic Info",fieldset_target_group:"iSCSI Group",target_form_placeholder_name:"Target Name",target_form_tooltip_name:'The base name is automatically prepended if the target name does not start with <i>iqn</i>. Lowercase alphanumeric characters plus dot (.), dash (-), and colon (:) are allowed. See the <i>Constructing iSCSI names using the iqn.format</i> section of <a href="https://tools.ietf.org/html/rfc3721.html" target="_blank">RFC3721</a>.',target_form_placeholder_alias:"Target Alias",target_form_tooltip_alias:"Optional user-friendly name.",target_form_placeholder_portal:"Portal Group ID",target_form_tooltip_portal:"Leave empty or select number of existing portal to use.",target_form_placeholder_initiator:"Initiator Group ID",target_form_tooltip_initiator:"Select which existing initiator group has access to the target.",target_form_placeholder_authmethod:"Authentication Method",target_form_tooltip_authmethod:"Choices are <i>None, Auto, CHAP,</i> or <i>Mutual CHAP</i>.",target_form_enum_authmethod:[{label:"None",value:"NONE"},{label:"CHAP",value:"CHAP"},{label:"Mutual CHAP",value:"CHAP_MUTUAL"}],target_form_placeholder_auth:"Authentication Group Number",target_form_tooltip_auth:"Select <i>None</i> or an integer. This value represents the number of existing authorized accesses.",target_form_placeholder_delete:"Delete",portal_form_placeholder_comment:"Description",portal_form_tooltip_comment:"Optional description. Portals are automatically assigned a numeric group.",portal_form_placeholder_discovery_authmethod:"Discovery Authentication Method",portal_form_tooltip_discovery_authmethod:"iSCSI supports multiple authentication methods that are used by the target to discover valid devices. <i>None</i> allows anonymous discovery while <i>CHAP</i> and <i>Mutual CHAP</i> require authentication.",portal_form_placeholder_discovery_authgroup:"Discovery Authentication Group",portal_form_tooltip_discovery_authgroup:"Group ID created in Authorized Access. Required when the Discovery Authentication Method is set to CHAP or Mutual CHAP.",portal_form_placeholder_ip:"IP Address",portal_form_tooltip_ip:"Select the IP addresses to be listened on by the portal. Click ADD to add IP addresses with a different network port. The address <i>0.0.0.0</i> can be selected to listen on all IPv4 addresses, or <i>::</i> to listen on all IPv6 addresses.",portal_form_placeholder_port:"Port",portal_form_tooltip_port:"TCP port used to access the iSCSI target. Default is <i>3260</i>.",initiator_form_tooltip_connected_initiators:"Initiators currently connected to the system. Shown in IQN format with an IP address. Set initiators and click an <b>-></b> (arrow) to add the initiators to either the <i>Allowed Initiators</i> or <i>Authorized Networks</i> lists. Clicking <i>Refresh</i> updates the <i>Connected Initiators</i> list.",all_placeholder_initiators:"Allow All Initiators",initiator_form_placeholder_initiators:"Add Allowed Initiators (IQN)",initiator_form_tooltip_initiators:'Initiators allowed access to this system. Enter an <a href="https://tools.ietf.org/html/rfc3720#section-3.2.6" target="_blank">iSCSI Qualified Name (IQN)</a> and click <i>+</i> to add it to the list. Example: <i>iqn.1994-09.org.freebsd:freenas.local</i>',initiator_form_placeholder_auth_network:"Authorized Networks",initiator_form_tooltip_auth_network:'Network addresses allowed use this initiator. Each address can include an optional <a href="https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing" target="_blank">CIDR</a> netmask. Click <i>+</i> to add the network address to the list. Example: <i>192.168.2.0/24</i>.',initiator_form_placeholder_comment:"Description",initiator_form_tooltip_comment:"Any notes about initiators.",globalconf_tooltip_basename:'Lowercase alphanumeric characters plus dot (.), dash (-), and colon (:) are allowed. See the <i>Constructing iSCSI names using the iqn.format</i> section of <a href="https://tools.ietf.org/html/rfc3721.html" target="_blank">RFC3721</a>.',globalconf_tooltip_isns_servers:"Hostnames or IP addresses of the ISNS servers to be registered with the iSCSI targets and portals of the system. Separate entr
1ies by pressing <code>Enter</code>.",globalconf_tooltip_pool_avail_threshold:"Generate an alert when the pool has this percent space remaining. This is typically configured at the pool level when using zvols or at the extent level for both file and device based extents.",globalconf_tooltip_alua:"Do not enable ALUA on TrueNAS unless it is also supported by and enabled on the client computers. ALUA only works when enabled on both the client and server.",globalconf_tooltip_iser:"Activates iSCSI Extensions for RDMA (iSER) in TrueNAS, enabling the iSCSI protocol to directly transfer data into and out of SCSI memory buffers for improved performance. Enabling is limited to TrueNAS Enterprise-licensed systems and requires the system and network environment have Remote Direct Memory Access (RDMA)-capable hardware.",fieldset_extent_basic:"Basic Info",fieldset_extent_type:"Type",fieldset_extent_options:"Compatibility",extent_placeholder_name:"Name",extent_tooltip_name:"Name of the extent. If the <i>Extent size</i> is not <i>0</i>, it cannot be an existing file within the pool or dataset.",extent_validators_name:[e.required],extent_placeholder_type:"Extent Type",extent_tooltip_type:"<i>Device</i> provides virtual storage access to zvols, zvol snapshots, or physical devices. <i>File</i> provides virtual storage access to a single file.",extent_placeholder_disk:"Device",extent_tooltip_disk:"Only appears if <i>Device</i> is selected. Select the unused zvol or zvol snapshot.",extent_placeholder_serial:"Serial",extent_tooltip_serial:"Unique LUN ID. The default is generated from the MAC address of the system.",extent_placeholder_path:"Path to the Extent",extent_tooltip_path:"Browse to an existing file. Create a new file by browsing to a dataset and appending /<i>(filename.ext)</i> to the path.",extent_placeholder_filesize:"Filesize",extent_tooltip_filesize:"Entering <i>0</i> uses the actual file size and requires that the file already exists. Otherwise, specify the file size for the new file.",extent_placeholder_blocksize:"Logical Block Size",extent_tooltip_blocksize:"Leave at the default of 512 unless the initiator requires a different block size.",extent_placeholder_pblocksize:"Disable Physical Block Size Reporting",extent_tooltip_pblocksize:"Set if the initiator does not support physical block size values over 4K (MS SQL).",extent_placeholder_avail_threshold:"Available Space Threshold (%)",extent_tooltip_avail_threshold:"Only appears if a <i>File</i> or zvol is selected. When the specified percentage of free space is reached, the system issues an alert.",extent_placeholder_comment:"Description",extent_tooltip_comment:"Notes about this extent.",extent_placeholder_insecure_tpc:"Enable TPC",extent_tooltip_insecure_tpc:'Set to allow an initiator to bypass normal access control and access any scannable target. This allows <a href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc771254(v=ws.11)" target="_blank">xcopy</a> operations which are otherwise blocked by access control.',extent_placeholder_xen:"Xen initiator compat mode",extent_tooltip_xen:"Set when using Xen as the iSCSI initiator.",extent_placeholder_rpm:"LUN RPM",extent_tooltip_rpm:"Do <b>NOT</b> change this setting when using Windows as the initiator. Only needs to be changed in large environments where the number of systems using a specific RPM is needed for accurate reporting statistics.",extent_placeholder_ro:"Read-only",extent_tooltip_ro:"Set to prevent the initiator from initializing this LUN.",extent_placeholder_enabled:"Enabled",extent_tooltip_enabled:"Set to enable the iSCSI extent.",extent_form_enum_rpm:[{label:"UNKNOWN",value:"UNKNOWN"},{label:"SSD",value:"SSD"},{label:"5400",value:"5400"},{label:"7200",value:"7200"},{label:"10000",value:"10000"},{label:"15000",value:"15000"}],extent_form_enum_type:[{label:"Device",value:"DISK"},{label:"File",value:"FILE"}],extent_form_enum_blocksize:[{label:"512",value:512},{label:"1024",value:1024},{label:"2048",value:2048},{label:"4096",value:4096}],authaccess_placeholder_tag:"Group ID",authaccess_tooltip_tag:"Allow different groups to be configured with different authentication profiles. Example: all users with a group ID of <i>1</i> will inherit the authentication profile associated with Group <i>1</i>.",authaccess_placeholder_user:"User",authaccess_tooltip_user:"User account to create for CHAP authentication with the user on the remote system. Many initiators use the initiator name as the user name.",authaccess_placeholder_secret:"Secret",authaccess_tooltip_secret:"User password. Must be at least 12 and no more than 16 characters long.",authaccess_placeholder_secret_confirm:"Secret (Confirm)",authaccess_tooltip_peeruser:"Only entered when configuring mutual CHAP. Usually the same value as <i>User</i>.",authaccess_tooltip_peersecret:"Mutual secret password. Required when Peer User is set. Must be different than the <i>Secret</i>.",associated_target_tooltip_target:"Select an existing target.",associated_target_tooltip_lunid:"Select the value or enter a value between <i>0</i> and <i>1023</i>. Some initiators expect a value below <i>256</i>. Leave this field blank to automatically assign the next available ID.",associated_target_tooltip_extent:"Select an existing extent.",fc_mode_placeholder:"Mode",fc_mode_tooltip:"",fc_target_placeholder:"Targets",fc_target_tooltip:"",fc_initiators_placeholder:"Connected Initiators",fc_initiators_tooltip:"",step1_label:"Create or Choose Block Device",name_placeholder:"Name",name_tooltip:"Keep the name short and only lowercase. Using a name longer than 63 characters can prevent accessing the block device. Allowed characters: letters, numbers, period (.), dash (-), and colon (:).",disk_placeholder:"Device",disk_tooltip:"Select the unused zvol or zvol snapshot. Select <i>Create New</i> to create a new zvol.",dataset_placeholder:"Pool/Dataset",dataset_tooltip:"Browse to an existing pool or dataset to store the new zvol.",volsize_placeholder:"Size",volsize_tooltip:"Specify the size of the new zvol.",volblocksize_placeholder:"Block Size",volblocksize_tooltip:"Only override the default if the initiator requires a different block size.",usefor_placeholder:"Sharing Platform",usefor_tooltip:"
1Choose the platform that will use this share. The associated options are applied to this share.",target_placeholder:"Target",target_tooltip:"Create a new Target or choose an existing target for this share.",step2_label:"Portal",portal_placeholder:"Portal",portal_tooltip:"Select an existing portal or choose <i>Create New</i> to configure a new portal.",step3_label:"Initiator",initiators_placeholder:"Initiators",initiators_tooltip:"Leave blank to allow all or enter a list of initiator hostnames. Separate entries by pressing <code>Enter</code>.",auth_network:{placeholder:"Authorized Networks",tooltip:"Network addresses allowed to use this initiator. Leave blank to allow all networks or list network addresses with a CIDR mask. Separate entries by pressing <code>Enter</code>.",error:"Invalid network address list. Check for typos or missing CIDR netmasks and separate addresses by pressing <code>Enter</code>."}};var i={root_level_warning:"Configuring SMB exports of root-level datasets may lead to storage reconfiguration issues. Consider creating a dataset instead.",shareAclDescription:"The SMB share ACL defines access rights for users of this SMB share up to, but not beyond, the access granted by filesystem ACLs.",placeholder_path:"Path",tooltip_path:"Select pool, dataset, or directory to share.",errormsg_name:"<i>global</i> is a reserved name that cannot be used as a share name. Please enter a different share name.",placeholder_name:"Name",tooltip_name:"Enter a name for the share.",placeholder_comment:"Description",tooltip_comment:"Description of the share or notes on how it is used.",placeholder_enabled:"Enabled",tooltip_enabled:"Enable this SMB share. Unset to disable this SMB share without deleting it.",tooltip_enabled_audit_log:"Controls whether audit messages will be generated for the share. <br><br> <b>Note</b>: Auditing may not be enabled if SMB1 support is enabled for the server.",tooltip_watch_list:"List of groups for which to generate audit messages. Keep this list empty to Watch All.",tooltip_ignore_list:"List of groups to ignore when auditing. If conflict arises between Watch List and Ignore List (based on user group membership), then Watch List will take precedence and ops will be audited.",placeholder_home:"Use as Home Share",tooltip_home:"Legacy feature. <br><br>Allows the share to host user home directories. Each user is given a personal home directory when connecting to the share which is not accessible by other users. This allows for a personal, dynamic share. Only one share can be used as the home share.",placeholder_purpose:"Purpose",tooltip_purpose:"Select a preset configuration for the share. This applies predetermined values and disables changing some share options.",placeholder_timemachine:"Time Machine",tooltip_timemachine:"Enable Time Machine backups on this share.",placeholder_timemachine_quota:"Time Machine Quota",tooltip_timemachine_quota:"Number of bytes",placeholder_afp:"Legacy AFP Compatibility",tooltip_afp:"This controls how the SMB share reads and writes data. Leave unset for the share to behave like a normal SMB share and set for the share to behave like the deprecated Apple Filing Protocol (AFP). This should only be set when this share originated as an AFP sharing configuration. This is not required for pure SMB shares or MacOS SMB clients.",afpDialog_title:"Warning",afpDialog_message:"This option controls how metadata and alternate data streams read write to disks. Only enable this when the share configuration was migrated from the deprecated Apple Filing Protocol (AFP). Do not attempt to force a previous AFP share to behave like a pure SMB share or file corruption can occur.",afpDialog_button:"I understand",placeholder_acl:"Enable ACL",tooltip_acl:"Enable ACL support for the SMB share.",placeholder_ro:"Export Read Only",tooltip_ro:"Prohibits writes to this share.",placeholder_browsable:"Browsable to Network Clients",tooltip_browsable:"Determine whether this share name is included when browsing shares. Home shares are only visible to the owner regardless of this setting.",placeholder_recyclebin:"Export Recycle Bin",tooltip_recyclebin:"Select to enable. Deleted files from the same dataset move to a <b>Recycle Bin</b> in that dataset and do not take any additional space. Recycle bin is for access over SMB protocol only. The files are renamed to a per-user subdirectory within <b><i>.recycle</i></b> directory at either (1) root of SMB share (if path is same dataset as SMB share) or (2) at root of current dataset if we have nested datasets. Because of (2) there is no automatic deletion based on file size.",placeholder_guestok:"Allow Guest Access",tooltip_guestok:'Legacy feature. <br><br>Privileges are the same as the guest account. Guest access is disabled by default in Windows 10 version 1709 and Windows Server version 1903. Additional client-side configuration is required to provide guest access to these clients.<br><br> <i>MacOS clients:</i> Attempting to connect as a user that does not exist in TrueNAS <i>
1does not</i> automatically connect as the guest account. The <b>Connect As:</b> <i>Guest</i> option must be specifically chosen in MacOS to log in as the guest account. See the <a href="https://support.apple.com/guide/mac-help/connect-mac-shared-computers-servers-mchlp1140/" target="_blank">Apple documentation</a> for more details.',placeholder_abe:"Access Based Share Enumeration",tooltip_abe:'Restrict share visibility to users with read or write access to the share. See the <a href="https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html" target=_blank>smb.conf</a> manual page.',placeholder_hostsallow:"Hosts Allow",placeholder_hostsdeny:"Hosts Deny",tooltip_hostsdeny:"Enter a list of denied hostnames or IP addresses. Separate entries by pressing <code>Enter</code>. If neither *Hosts Allow* or *Hosts Deny* contains an entry, then SMB share access is allowed for any host. <br><br> If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow hosts on the *Hosts Allow* list. <br><br> If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all hosts that are not on the *Hosts Deny* list. <br><br> If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts that are on the *Hosts Allow* list. <br><br> If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list, then allow it.",placeholder_shadowcopy:"Enable Shadow Copies",tooltip_shadowcopy:'Export ZFS snapshots as <a href="https://docs.microsoft.com/en-us/windows/desktop/vss/shadow-copies-and-shadow-copy-sets" target=_blank>Shadow Copies</a> for VSS clients.',placeholder_aapl_name_mangling:"Use Apple-style Character Encoding",tooltip_aapl_name_mangling:"By default, Samba uses a hashing algorithm for NTFS illegal characters. Enabling this option translates NTFS illegal characters to the Unicode private range.",placeholder_streams:"Enable Alternate Data Streams",tooltip_streams:'Allows multiple <a href="http://www.ntfs.com/ntfs-multiple.htm">NTFS data streams</a>. Disabling this option causes MacOS to write streams to files on the filesystem.',placeholder_durablehandle:"Enable SMB2/3 Durable Handles",tooltip_durablehandle:"Allow using open file handles that can withstand short disconnections. Support for POSIX byte-range locks in Samba is also disabled. This option is not recommended when configuring multi-protocol or local access to files.",placeholder_fsrvp:"Enable FSRVP",tooltip_fsrvp:'Enable support for the File Server Remote VSS Protocol (<a href="https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp" target="_blank">FSRVP</a>). This protocol allows RPC clients to manage snapshots for a specific SMB share. The share path must be a dataset mountpoint. Snapshots have the prefix <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have this prefix for an RPC user to delete it.',placeholder_path_suffix:"Path Suffix",tooltip_path_suffix:'Appends a suffix to the share connection path. This is used to provide unique shares on a per-user, per-computer, or per-IP address basis. Suffixes can contain a macro. See the <a href="https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html" target="_blank">smb.conf</a> manual page for a list of supported macros. The connectpath **must** be preset before a client connects.',placeholder_auxsmbconf:"Additional Parameters String",tooltip_auxsmbconf:"String of additional smb4.conf parameters not covered by the system's API.",actions_basic_mode:"Basic Mode",actions_advanced_mode:"Advanced Mode",action_share_acl:"Edit Share ACL",action_edit_acl:"Edit Filesystem ACL",action_edit_acl_dialog:{title:"Error"},dialog_warning:"Warning",dialog_warning_message:"Setting default permissions will reset the permissions of this share and any others within its path.",dialog_edit_acl_title:"Configure ACL",dialog_edit_acl_message:"Configure permissions for this share's dataset now?",dialog_edit_acl_button:"Configure now",restart_smb_dialog:{title:"Restart SMB Service?",message_time_machine:"Enabling <em>Time Machine</em> on an SMB share requires restarting the SMB service.",message_allow_deny:"Changes to <em>Hosts Allow</em> or <em>Hosts Deny</em> take effect when the SMB service restarts.",action_btn:"Save and Restart SMB Now",cancel_bt
1n:"Save Without Restarting"},restarted_smb_dialog:{title:"SMB Service",message:"The SMB service has been restarted."},ae_who_sid_tooltip:'Who this ACL entry applies to, shown as a <a href="https://docs.microsoft.com/en-us/windows/win32/secauthz/security-identifiers" target="_blank">Windows Security Identifier</a>. Either a <i>SID</i> or a <i>Domain</i> and <i>Name</i> is required for this ACL.',ae_who_name_domain_tooltip:"The domain for local users is the NetBIOS name of the TrueNAS server.",ae_who_name_name_tooltip:"Who this ACL entry applies to, shown as a user name. Requires adding the user <i>Domain</i>.",ae_perm_tooltip:'Predefined permission combinations:<br><i>Read</i>: Read access and Execute permission on the object (RX).<br><i>Change</i>: Read access, Execute permission, Write access, and Delete object (RXWD).<br><i>Full</i>: Read access, Execute permission, Write access, Delete object, change Permissions, and take Ownership (RXWDPO).<br><br> For more details, see <a href="https://www.samba.org/samba/docs/current/man-html/smbcacls.1.html" target="_blank">smbacls(1)</a>.',ae_type_tooltip:"How permissions are applied to the share. <i>Allowed</i> denies all permissions by default except those that are manually defined. <i>Denied</i> allows all permissions by default except those that are manually defined.",formTitleAdd:"Add SMB",formTitleEdit:"Edit SMB",stripACLDialog:{title:"Warning",message:"An ACL is detected on the selected path but <i>Enable ACL</i> is not selected for this share. ACLs must be stripped from the dataset prior to creating an SMB share.",button:"Close"},manglingDialog:{title:"Warning",message:"The <i>Use Apple-style character encoding</i> value has changed. This parameter affects how file names are read from and written to storage. Changes to this parameter after data is written can prevent accessing or deleting files containing mangled characters.",action:"I Understand"},restartPt1:"The following changes to this SMB Share require the SMB Service to be restarted before they can take effect.",restartPt2:"Would you like to restart the SMB Service?"};var r={root_level_warning:"Configuring NFS exports of root-level datasets may lead to storage reconfiguration issues. Consider creating a dataset instead.",tooltip_path:"Full path to the pool, dataset or directory to share. The path must reside within a pool. Mandatory.",error_alias:"The <i>Alias</i> field can either be left empty or have an alias defined for each path in the share.",tooltip_comment:"Provide helpful notations related to the share, e.g. \u2018Shared to everybody\u2019. Maximum length is 120 characters.",tooltip_alldirs:"Set to allow the client to mount any subdirectory within the <b>Path</b>.",tooltip_ro:"Set to prohibit writing to the share.",tooltip_quiet:'Set to inhibit some syslog diagnostics to avoid error messages. See <a href="https://man7.org/linux/man-pages/man5/exports.5.html" target="_blank">exports(5)</a> for examples.',tooltip_enabled:"Enable this NFS share. Unset to disable this NFS share without deleting it.",tooltip_expose_snapshots:"Allow accessing ZFS snapshots over the NFS protocol.",tooltip_networks_wrapper:'Click "Add" to specify NFS client network ranges for this share. If both networks and hosts are empty the share will be exported to everyone.',tooltip_network:"Allowed network in network/mask CIDR notation (example <i>1.2.3.4/24<i>). One entry per field. Leave empty to allow everybody.",tooltip_hosts:"Allowed IP address or hostname. One entry per field. Leave empty to allow everybody.",tooltip_hosts_wrapper:'Click "Add" to specify NFS client hosts for this share. If both networks and hosts are empty the share will be exported to everyone.',tooltip_maproot_user:"When a user is selected, the <i>root</i> user is limited to the permissions of that user.",tooltip_maproot_group:"When a group is selected, the <i>root</i> user is also limited to the permissions of that group.",tooltip_mapall_user:"The specified permissions of that user are used by all clients.",tooltip_mapall_group:"The specified permissions of that group are used by all clients.",tooltip_security:"Specifies level of authentication and cryptographic protection. SYS or none should be used if no
1KDC is available. If a KDC is available, e.g. Active Directory, KRB5 is recommended. If desired KRB5I (integrity protection) and/or KRB5P (privacy protection) may be included with KRB5."};var n={delete_share_message:"The sharing configuration will be removed. Data in the share dataset will not be affected.",dialog_title:"Enable service",dialog_message:"Enable this service to start automatically.",dialog_button:"Enable Service"};export{o as a,r as b,i as c,n as d}; 2//# sourceMappingURL=chunk-EAYHYO5L.js.map
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.