AFP548 Changing the world one server at a time.

Samba POSIX Permissions Problems

Home › Forums › OS X Server and Client Discussion › File Serving › Samba POSIX Permissions Problems

Viewing 1 post (of 1 total)
  • Author
    Posts
  • #375758
    Anderson
    Participant

    I’ve been searching for about a week off and on now and testing many potential solutions and still have found no way to fix a permissions problem I am having!
    I’m using OS X Leopard Server 10.5.6 to host a Samba share for use as a home folder for Windows clients. The Server is in a dual directory configuration (bound to both Open Directory and Active Directory). I can authenticate, single sign-on works, and mcx and GPO settings are operational. When a user signs into Windows for the first time and the Redirected Folders policy is applied, the Samba share is mounted, redirects the local “My Documents” folder and seems to copy the contents to the share correctly. Within Windows, the owner is able to access all the folders within his/her profile and My Documents folder as well.

    The only issue is when a user decides to sign in to a OS X client they do not have permission to access their own “My Documents” folder now on the Samba share. The POSIX permissions for the “My Documents” folder is set to 000 for some reason but with correct ownership. It seems that regardless of whether I use the option of inherit permissions or not on the Samba share the same error happens. Also, I’ve tried to specify the “force directory mask = 0500” directive to mandate at least Read access to the owner’s own folders so they can access and browse them in OS X to no avail.

    Contents of /var/samba/shares/users:

    #VERSION 3
    path=/Volumes/Data Set/Users
    comment=Users
    usershare_acl=S-1-1-0:F
    guest ok=no
    inherit permissions=no
    oplocks=yes
    directory mask=0755
    force directory mask=0500
    strict locking=no
    create mask=0755

    POSIX Directory permissions after Windows redirects ‘My Documents’ folder:

    xserve1:netfolder xserve-admin$ ls -la
    total 16
    d---rwx---+ 4 adsdir-admin  admin               136 Mar 15 14:52 .
    drwxr-xr-x+ 6 root          admin               204 Mar 15 14:50 ..
    ----rw----@ 1 xserve-admin  admin              6148 Mar 15 14:52 .DS_Store
    d---------+ 6 netfolder     HOME\domain users   204 Mar 15 14:52 Documents
     
    xserve1:netfolder xserve-admin$ ls -la Documents/ 
    total 16
    d---------+ 6 netfolder     HOME\domain users   204 Mar 15 14:52 .
    d---rwx---+ 4 adsdir-admin  admin               136 Mar 15 14:52 ..
    ----------@ 1 xserve-admin  HOME\domain users  6148 Mar 15 14:52 .DS_Store
    drwxr-xr-x+ 3 netfolder     HOME\domain users   102 Mar 15 14:52 My Music
    drwxr-xr-x+ 2 netfolder     HOME\domain users    68 Mar 15 14:51 My Pictures
    d---------+ 3 netfolder     HOME\domain users   102 Mar 15 14:51 Visual Studio 2005
Viewing 1 post (of 1 total)
  • You must be logged in to reply to this topic.