[wandal]

Something similar is happening to me.

I migrated the group folders from the old G4 to the new XServe. Kerberos is not running, just OD auth. No ACL on the shared disk. I have group ‘a’ that is the main group every registered OD user belongs to. Each user may also belong to one or more out of three groups, ‘b’ ‘c’ and ‘d’. I am the user ‘mike’, belonging to the group ‘a’ and the group ‘b’.

Now the issue. I login as ‘guest’ to a machine on the LAN, then I go thru network-server (or cmd-K) to access the shared folder for group ‘b’ on the XServe disks. Login okay with userd ‘mike’ an password, then I see all the shared disks and the folders on it (group ‘a’ membership should be ok). When I try to open the group ‘b’ folder, I can’t. Permission denied. Just like ‘mike’ is not belonging to group ‘b’. Surprisingly, the issue is present only on a few machines, not on each one. I thought the problem arises on the identifying system of each user, particularly on the generateduid for the user/group. Maybe the cache of the osolete generatedid on the client machine.

I tried this on the client machine: 1) Open Directory Access and deactivate the LDAPv3 service. 2) Reboot the client machine. 3) Open Netinfo Manager, and delete the MCX Cache: groups users machines. 4) Open Directory Access and activate the LDAPv3 service. 5) Reboot the client machine.
This solved the problem. Anyway I am still investigating the issue.

[Author]

Posts