5 Replies Latest reply: May 31, 2013 10:22 AM by mncrnich
thedukeness Level 1 Level 1 (0 points)

I'm having a problem with OSX 10.8.2 Server, any SMB user always has the system drive available as a share ie "Server HD".  I don't have that share enabled either in the file sharing tab of Server or in the Sharing preference pane.  If I connect via AFP the Server HD is not available.  However its always there when connected via SMB.  What is going on?  I have three OSX 10.8 servers and they all have the same behavior.


Mac mini, OS X Mountain Lion (10.8.2)
  • 1. Re: Samba is sharing my root (and I don't want that)
    FromOZ Level 2 Level 2 (405 points)

    Run this command from terminal (copy paste it) on your server

     

    sudo serveradmin settings sharing

     

    and see what settings are configured for sharing.

  • 2. Re: Samba is sharing my root (and I don't want that)
    thedukeness Level 1 Level 1 (0 points)

    Looks ok there:

     

    bash-3.2#  serveradmin settings sharing

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:dsAttrTypeStandard\:Ge neratedUID = "75FC575E-F582-4A79-B6CB-5C9D83259590"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbName = "Groups"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:afpIsGuestAccessEnable d = no

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbDirectoryMask = "0755"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:afpName = "Groups"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbCreateMask = "0644"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:nfsExportRecord = _empty_array

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:path = "/Volumes/Userdata/Groups"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbUseStrictLocking = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbIsGuestAccessEnable d = no

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:name = "Groups"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbInheritPermissions = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:ftpName = "Groups"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbIsShared = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:afpIsShared = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:isTimeMachineBackup = no

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbUseOplocks = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:dsAttrTypeNative\:shar epoint_group_id = "18704FF6-4806-4B39-ADF1-B4309AA505A4"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:isIndexingEnabled = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:mountedOnPath = "/Volumes/Userdata"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:dsAttrTypeStandard\:Gen eratedUID = "AFACF5D4-5852-4285-B544-9A46783B407C"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbName = "Users"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:afpIsGuestAccessEnabled = no

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:automountMountPath = "/Network/Servers"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:automountFileSystemType = 0

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:automountHasMount = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbDirectoryMask = "0755"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:mountedOnPath = "/Volumes/Userdata"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:afpName = "Users"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbCreateMask = "0644"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:nfsExportRecord = _empty_array

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:path = "/Volumes/Userdata/Users"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbUseStrictLocking = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbIsGuestAccessEnabled = no

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:name = "Users"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbInheritPermissions = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:ftpName = "Users"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbIsShared = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:afpIsShared = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:isTimeMachineBackup = no

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbUseOplocks = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:isIndexingEnabled = yes

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:automountDSPath = "/LDAPv3/127.0.0.1"

    sharing:sharePointList:_array_id:/Volumes/Userdata/Users:dsAttrTypeNative\:share point_group_id = "E0755737-DB5E-4BD8-945F-0BE91CF36493"

  • 3. Re: Samba is sharing my root (and I don't want that)
    FromOZ Level 2 Level 2 (405 points)

    The SMB implementation changed in Lion from Samba to an in-house Apple solution 'SMBX'. So if you are running vanilla OS X 10.8.2 Server 2.2 then you will not be running Samba, but SMBX. If you do an Internet search on —  "OS X" SMBX — you will find a lot of info.

     

    From your server terminal you can execute:

     

    man smbd or man smbutil

     

    To see a list of SMB shares on your server use the command below replace name for your server. In my server app UI I have defined the default file shares - Groups, Server Public & Users. As you can see there are four more. One of which says 'Macintosh HD', sounds ominous.

     

    $ smbutil view //your_server_name

    Password for your_server_name:

    Share                                           Type    Comments

    -------------------------------

    Groups                                          Disk   

    Server Public                                   Disk   

    Users                                           Disk   

    Data                                            Disk   

    Administrator                                   Disk   

    Macintosh HD                                    Disk   

    IPC$                                            Pipe   

     

    7 shares listed

     

    The new SMBX implementation is NOT (that I see) using the previous (Linux sort of standard flavour) smbd.conf file to define sharepoints.

     

    If I look at the files for smbd (the new Apple SMBX daemon) as listed in man smbd

     

    FILES

         /Library/Preferences/SystemConfiguration/com.apple.smb.server.plist

                  The primary configuration for the SMB stack. This file is updated by various system services and should not be edited by hand.

     

     

         /System/Library/LaunchDaemons/com.apple.smbd.plist

                  The smbd service's property list file for launchd(8).

     

    I do not see any sharepoints listed. Obviously there is some configuration file somewhere which lists sharepoints but I have not found yet.

     

    BTW if you want to complain about the change in functionality regarding SMB you should not blame Apple but the 'Free' Software Foundation and its GPL 3. They have effectively managed to limit your freedom to use the software you want/need because Samba is now licenced under the onerous terms of GPL 3 apparently requiring Apple to rip it out of OS X Server.

  • 4. Re: Samba is sharing my root (and I don't want that)
    UptimeJeff Level 4 Level 4 (3,390 points)

    If I rememnber right, an admin user sees all volumes, but standard users should not.

     

    Did you compare standard vs admin user?

  • 5. Re: Samba is sharing my root (and I don't want that)
    mncrnich Level 1 Level 1 (0 points)

    I am having the same issue.  Mountain Lion Server native SMB is sharing every disk on server even though I have only specified two share points. 

     

    Users connecting have admin access.  All workstations have same user account.  Both OS X & WIN7.  The account has admin rights. 

     

    Due to other native ML Server SMB issues, I am investigating de-activating in favor of SMBup or similar.