ACLs Disappear

We've been having this ongoing problem with our Xsan where on certain machines the ACLs will just disappear. The POSIX permissions are still there, but no ACLs.

I usually just do a permission propagation from the Xsan Admin application and that usually fixes it, but sometimes I've had to remove the machine from the SAN and readd it.

We use the AD-OD triangle configuration for logins and sometimes rebinding the computer to the AD fixes it, but I want a more permanent solution so I don't have to keep fixing this for our team.

There's nothing in the logs that look abnormal when it happens. Any ideas or things I should look for that might narrow down what the problem could be?

Our configuration is:
- Xsan 2.2.1
- 10.6.4
- 2 x Intel Xserves MDCs, one of the Xserves is resharing the volume over AFP.
- 4 x Mac Pros running 2.2.1

Thanks,
Jason

Mac Pro, Macbook Pro, et al, Mac OS X (10.6.4)

Posted on Aug 9, 2010 6:48 AM

Reply
7 replies

Oct 26, 2010 2:25 AM in response to Jason Buckner

Jason,

I think we are having the same issue on our own XSAN (v2.2.1).

On the XServe (10.5) ACLS are active and working. We have 2 OS X clients (10.6 and 10.5) which are losing the ACL information spontaneously. It can work OK for days and then suddenly (it appears) the clients lose ACL information.

Umounting the XSAN volume and removing the client from the XSAN then re-adding the client again usually solves the issue...

This problem is driving us mad. We cannot depend on the XSAN volume at this moment and we are desperately looking for a solution... Anybody have information on how to solve this?

Dec 8, 2010 10:39 PM in response to abrinkman

Is the Xserve you refer to an MDC or just a reshare? If it's an MDC make sure it's running a vesion of OS X that's at least the same or a later than your clients.

If any of your machines are a re-sharing the Xsan volume over AFP, make sure all of your users and permissions are being maintained on Open Directory. If you're also using a local directory on your re-share server that users are logging into, you will have conflicting permissions on your Xsan volume, which will caase what you are describing. Also, if you are re-sharing the volume, make sure to turn Native Extended Attributes on.

In my experience Xsan 2.2 and 10.5 do not mix well. However, 10.5 and Xsan 2.1.1 is a very solid combination. If you need to use SNL, 10.6.4 and Xsan 2.2.1 are turning out to be very good as well.

JM

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

ACLs Disappear

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.