You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Komannder Author

Level 1

0 points

AFP Leopard Server problems changing permission with get info

Hi guys,

I have a very strange problem with Mac OS X 10.5.2 clients on server 10.5.2.

1) client does a "get info" on a server folder:
user: auser - Read & Write
group: agroup - Read Only
everyone: No Access

2) Client tries to change the permission of the group to "Read & Write"

3) WEIRDNESS: As the client changes the perms, the OWNER gets changed to "theadmin" (main admin, user id 500), and the group to "com.apple.monitor allservices" !!!!!!!!

What the $/&/"·&% is going on? How can changing the perms change the owner and group?

From the Terminal "ls -la" show the correct permissions!

ACLs: Yes, I am using ACLs, but the same happens with a "normal" user (no ACLs affect him) as well as the ACLed user that has an "all permissions" override ACL on a parent folder.

Happens from all 10.5 client computers. Server restarted, clients restarted. Ran Disk Utility: no problems found.

If anyone has any idea of what is going on I would greatly appreciate it!

Thanks,
Charles

All, Mac OS X (10.5.2)

Posted on Mar 3, 2008 2:24 AM

18 replies

Jul 11, 2008 7:11 AM in response to Bert Sierra

Bert:

Very good suggestions. You are correct. Using chflags with the recursive option will unlock all files in the folder:

*sudo chflags -R nouchg /path*

And using chmod with -N will remove the entire ACL - all ACL entries. That's a very good point:

*sudo chmod -R -N /path*

--Gerrit

Jul 16, 2008 4:33 AM in response to Gerrit DeWitt

Thank you Gerrit; very helpful information and well explained, too!

bhsbt

Level 1

0 points

Jul 16, 2008 2:36 PM in response to Gerrit DeWitt

Gerrit, thanks for the helpful details. I have an Active Directory integration question:

Do I need to specify the Domain of the group when the Leopard Server is connected to Active Directory? So in your example the commmand would be: sudo chmod -R +a "MYDOMAIN backslash backslash designers allow readattr...? (The first backslash comments out the second. And I couldn't type literal backslashes because of how this board formats.)

The issue I'm struggling with: Folders created on server DON'T inherit permissions. But folders created on Tiger and Leopard machines and then copied to the server DO inherit permissions.

AFP Leopard Server problems changing permission with get info