Can't change SMB share file attributes from Windows

OK, first you have to enable Access Control Lists on the volume which houses this share point. Then, you have to make sure that the share point has proper effective permissions for the user who is connecting.

Here's an example:

Let's say you're sharing /Volumes/Data-Disk/Windows-Share, and Data-Disk already has ACLs turned on. Let's also say that "windowsbuddy" is the user who is connecting, and he needs read/write permissions for all of Windows-Share. To grant windowsbuddy the correct effective permissions, you can add an ACL allow entry for him, as shown below via Terminal on your server:

sudo chmod -R +a "windowsbuddy allow readattr,readextattr,readsecurity,list,search,read,execute,\
writeattr,writeextattr,delete,delete child,add_file,addsubdirectory,write,append,\
file inherit,directoryinherit" /Volumes/Data-Disk/Windows-Share

Note that we have the readattr, writeattr, readextattr, and writeextattr attributes allowed. We also have readsecurity enabled, which allows listing of permissions in Finder Info windows and in the Properties/Security window in Explorer.

If windowsbuddy needs to be able to adjust permissions - Full Control as Windows calls it - add these two ACL controls to the above ACE:

chown - take ownership

writesecurity - change permissions

Hope this helps.

--Gerrit

Welcome to the Apple Discussions.

In order to help make your stay more pleasant, I would like to inform you that this is a place for users to offer and seek help to and from other users. Don't expect Apple to monitor the thousands of threads and answer all questions.

Hope you enjoy your stay.

As a matter of fact, I do expect Apple to monitor this forum, and offer technical help.

Anyway, this problem persists with 10.5.2 update. Just to be clear, I would like the Windows program to change the read only attribute on a SMB share. I am not trying to do this from the MAC side, so I am not sure the ACL description posted here is relevant.

I tried using fsaclctl to enable ACL on the volume being shared, and then used chmod with the many options above. Though the commands appear to have succeeded, I still cannot change permissions from the Windows side(from the explorer, or from command line attrib utility). Intuitively, it seems like ACL should not need to be needed to support the basic Windows permissions (Read, Write). This used to work without fuss in Tiger.