AFP Inherit Permissions - help??

Question

Level 1

120 points

AFP Inherit Permissions - help??

How do you set the permissions to inherit with Leopard? According to the documentation it's similar to Tiger but, there are no selections within the server admin to set permissions to inherit. With Tiger, there was a checkbox for inherit permissions, with Leopard it's no longer there despite what it says in the documentation . . .

Help

iBook, G4, G3(B&W), PM8500, Mac OS X (10.5.4)

Posted on Jul 17, 2008 2:28 PM

Reply

Answer 1

Jul 17, 2008 3:50 PM in response to scitekmike

Hi

If I understand you correctly then yes there is.

Server Admin > File Sharing. Select your share point. Doing this should show what default POSIX permissions are set. Typically Owner : root/admin R/W, Group : admin R, Everyone : R. Above this window is a line that says ACL. Click the '+' icon and add users and/or groups by dragging them from the user/group palette to the ACL window. From there you can define permissions that will show inheritance etc.

Honestly they are there right in front of you.

Tony

Reply

Answer 2

scitekmike Author

Level 1

120 points

Jul 17, 2008 6:00 PM in response to Antonio Rocco

Yes, I know for ACL's however, it's not working and according to the documentation you should be able to set it to inherit the POSIX permissions as you can in 10.4.

I had before set a group with R/W permissions in an ACL and set it to inherit however, upon saving, coping etc. the new files don't inherit the permissions of the parent (share point). Instead, whatever user saved/created the file ends up being the owner with R/W while group and others change to R only.

Reply

Answer 3

Jul 18, 2008 1:06 AM in response to scitekmike

You don't say what filesharing protocol you are using: AFP and/or SMB?

At least SMB (Samba 3.0.25b-apple) seems to have issues with ACLs/inheritance.

Reply

Answer 4

shashin

Level 1

0 points

Jul 18, 2008 6:10 AM in response to Leif Carlsson

I believe the subject header was AFP.

I am having the same issues with 10.5.4 server and AFP not inheriting the share point permissions.
I currently workaround by running a cron script to chwon the sharepoint at intervals

Reply

Answer 5

Jul 21, 2008 2:35 PM in response to scitekmike

i had the same issue with one of our X Serve's running 10.5.2. here's what i did to fix it:

added ("+") the same users and groups into the ACL field (can drag them between the "ACL" and "POSIX" bars). when added, the default permission "Applies To" field was "This folder, Child files, Child folders, All descendants".

this wasn't the case for my POSIX accounts. they applied to "This folder" only, which makes sense--no inheritance.

hope this helps... (someone...)

Reply

Answer 6

Aug 19, 2008 6:41 AM in response to scitekmike

According to the documentation it's similar to Tiger but, there are no selections within the server admin to set permissions to inherit.

I agree, I see the same symptoms with two different Mac OS X Server 10.5.4 installations — one of which was an upgrade from 10.3.9, one of which was clean.

At <https://bugreport.apple.com/> I have created
Apple bug ID 6158868.

See also
<http://discussions.apple.com/thread.jspa?threadID=1428118> and
<http://discussions.apple.com/thread.jspa?threadID=1662723>.

Reply

Answer 7

Aug 23, 2008 12:49 AM in response to scitekmike

With reference to at least two discussions
<http://discussions.apple.com/thread.jspa?threadID=1615497>
<http://discussions.apple.com/thread.jspa?threadID=1662723>
I have asked for Apple bug ID 6158868 to be re-opened and classified as a bug in documentation.

In that bug, Apple state:

POSIX permissions are deprecated in Leopard and ACLs should be used instead.

Reply

Answer 8

Ben Lloyd

Level 1

120 points

Sep 18, 2008 7:30 AM in response to Graham Perrin

Hi, sorry to 'Hijack' your post. I noticed from your comments that you successfully applied a upgrade from 10.3.9 Server to 10.5 Server. I am about to try this and wondered if you had any advice. Are there two server upgrade types for either Intel or PPC Xserves? We have a PPC XServe running 10.3.9 as an OD Master. Any help is greatly appreciated.

Reply