NFS permissions and umask

OK, i am trying to accomplish something i feel like should be very simple, therefore of course it being fiendishly complicated.

I have an xsan volume that is being shared out via NFS to a mix of OS X and Linux clients. All i am looking to do is to change the umask (or something equivalent) so that when users write files to the share they are written with both user and group set as read-write. I have tried setting the umask in the terminal for the clients. I have tried playing with crap like:

defaults write com.apple.finder umask 0
defaults write -g NSUmask 0

Both on clients and the server. I am having no luck whatsoever. ACLs are not enabled on the xsan volume. I called apple and they told me to share it out AFP and use ACLs, however they weren't quite sure on how to get linux to mount an afp volume (kidding). That was all that Enterprise support would do for me.

Any thoughts?

Posted on Jun 28, 2008 4:17 PM

Reply
4 replies

Jul 7, 2008 11:13 AM in response to digitalrhino

Hi, I have just posted a similar question. Maybe we can figure something out together.
http://discussions.apple.com/thread.jspa?threadID=1588236&tstart=0

In this article on Open Directory management I might have come across something interesting:
http://www.macdevcenter.com/lpt/a/7073

The exciting part is at the end:

+One final thing to keep in mind, if you use OS X with NFS in a group environment you should probably edit this file:+

/Library/Preferences/.GlobalPreferences.plist
+Use the Property List Editor to add the value NSUmask = 2. This binary value will set the umask to 002, which will allow other members of your NFS group to read, write, and execute. The default behavior of the finder is to create files with umask 022, which means group users only have read and execute privileges.+

+You should probably also set the umask in /etc/profile by adding the line:+

+umask 002+
+Note that a reboot is required for the Finder and the bash shell to get their new respective umask values.+

I have successfully managed to edit the etc/profile entry and can now create proper files through the command line but I seem to be doing something wrong within the Property List Editor...

Let me know whether this thing works for you.

Best of luck,

Martin

Jul 7, 2008 3:47 PM in response to digitalrhino

We had a similar problem (NFS, hosted on Leopard Server, served to both Leopard and Linux clients).

By following this post ( http://discussions.apple.com/thread.jspa?threadID=1554843), we were able to get the umask for the individual users set to 002, while leaving the system umask to 022.

This has been working perfectly for us, for both interactives and for command line shells.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

NFS permissions and umask

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.