4 Replies Latest reply: Aug 7, 2012 6:13 PM by Blaidd Drwg
borquee Level 1 Level 1 (0 points)

Hi,

 

Xsan was setup by the book, we have a secondary metadata server and network account server... all on lion (everyone attached to the same network account server properly... everyone can login properly)

 

We have two user groups: default "workgroup" for empleyees and "editors" for visiting editors. "Workgroup" can do everything, "edirors" can read only.

 

We have a constant "Fetching..." problem.... both for local and network users.

 

Xsan Admin almost all the time can read ACL's on xsan disks, but on occasion it just breaks and displays "AAAAAAA-EEEEEE" (something like that)

 

Removing broken names sometimes fixes a problem but not for long...

 

I tried "reset home directry permissions and acl" from recovery console on client computers (didn't help)... That thing works only on local accounts, we all use network accounts which are obviously not recognised properly

 

Any ideas?


xsan, Mac OS X (10.7.2)
  • Blaidd Drwg Level 1 Level 1 (70 points)

    When you see "Fetching..." in Finder's Get Info window, at the same time, does the ACL look correct if you do "ls -led /path/to/file_or_directory" in Terminal? How about in Xsan Admin's permissions editor? If it looks correct outside of Finder, does forcing Finder to relaunch fix the "Fetching..." status?

  • borquee Level 1 Level 1 (0 points)

    Hi,

     

    Xsan admin's permissions looks nice, all readable now. But on occasion they go crazy ("FFFFEEEE-DDDD...")

     


    Server1 (network acount server and secondary mds). In get info one group is ok, other is not

    Server2 (open directory replica and master msd). In get info one group is ok, other is not (different one)

     

    This list from the servers (identical on borh servers). Some are Fetching in Get info

     

    server1:Volumes adm$ ls -led Post/

    drwxrwxrwx@ 31 root  wheel  2048 Jun 13 08:44 Post/

    0: group:editors allow list,search,readattr,readextattr,readsecurity,file_inherit,directory_inherit

    1: group:workgroup allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,re adextattr,writeextattr,readsecurity,writesecurity,chown,file_inherit,directory_i nherit

    server1:Volumes adm$ ls -led Edit/

    drwxrwxrwx@ 17 root  wheel  2048 Jun 12 14:39 Edit/

    0: group:editors allow list,search,readattr,readextattr,readsecurity,file_inherit,directory_inherit

    1: group:workgroup allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,re adextattr,writeextattr,readsecurity,writesecurity,chown,file_inherit,directory_i nherit

     

     

    This is from my terminal... Fetching in Get info

    drwxrwxrwx@ 31 root  wheel  2048 Jun 13 08:44 Post/

    0: FFFFEEEE-DDDD-CCCC-BBBB-AAAA82000400 allow list,search,readattr,readextattr,readsecurity,file_inherit,directory_inherit

    1: FFFFEEEE-DDDD-CCCC-BBBB-AAAA82000800 allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,re adextattr,writeextattr,readsecurity,writesecurity,chown,file_inherit,directory_i nherit

     

    drwxrwxrwx@ 17 root  wheel  2048 Jun 12 14:39 Edit/

    0: FFFFEEEE-DDDD-CCCC-BBBB-AAAA82000400 allow list,search,readattr,readextattr,readsecurity,file_inherit,directory_inherit

    1: FFFFEEEE-DDDD-CCCC-BBBB-AAAA82000800 allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,re adextattr,writeextattr,readsecurity,writesecurity,chown,file_inherit,directory_i nherit

     

    Some clients can read some group names

     

    Thanks,

    B

  • borquee Level 1 Level 1 (0 points)

    Hi,

     

    Moutain Lion Server clean install, clients upgraded... still fetching... anyone?

  • Blaidd Drwg Level 1 Level 1 (70 points)

    The ls output shows you're unable to resolve ACL users or groups. Check out this article: http://support.apple.com/kb/TS3556