Everything seemed to be working well as we tested a few initial Leopard clients against our aging Panther server, so we rolled out the Leopard client update across the board.
I think it was one of the last updates, 10.5.4 or 10.5.5 that have terribly broken permissions on our AFP shares. Either that or it was just dumb luck that it had not affected our test cases.
At any rate, viewing permissions for online items will show incorrect (typically unknown) user/group names and permissions levels. I can verify on the server that the file is owned by a certain user/group and that permissions are set correctly, but Leopard clients (at least at 10.5.5) will have problems accessing or writing to these resources.
Any thoughts on how to narrow this down, or, even better, to fix it?
I have added the LDAP server information in the Leopard clients’ Directory Utility application for both Authentication and for Contacts.