Lion Server Windows File Share Permissions

Question

Level 1

14 points

Lion Server Windows File Share Permissions

I am running the current version of Lion Server on a Mac Mini Server. The problem I am having is that I have two Windows users that share files and every file they create is read only to the other user. Both users are in the same groups. I have to apply permissions to enclosed folders every day (sometimes multiple times a day) when they need to get access to the other file. I am pulling my hair out and about to switch to a Linux server but know the Macs rule....

Thanks

Thom

Mac mini, Mac OS X (10.7.4), Server

Posted on Jul 23, 2012 6:48 AM

Reply

Answer 1

bfdulock

Level 2

214 points

Jul 23, 2012 7:01 AM in response to no1tmorrow

Try enabling ACLs for SMB. This article tells how:

http://support.apple.com/kb/TS4149?viewlocale=en_US

I don't know why ACLs are not already on by default.

Reply

Answer 2

no1tmorrow Author

Level 1

14 points

Jul 23, 2012 8:09 AM in response to bfdulock

Well I enabled it. The Windows user created a folder. Its permissions are his username read/write, _spotlight custom, everyone no access.

If I go into the Server Application and view the Share it has the below settings

The two Windows users as Read/Write

The group they are in as Read/Write

Everyone is even set to Read/Write (would like to turn that off but testing still)

Share with Mac clients and Share with Windows clients both checked

Any thoughts?

Thanks again

Thom

Reply

Answer 3

bfdulock

Level 2

214 points

Jul 23, 2012 9:16 AM in response to no1tmorrow

According to the Apple article you need to set the ACLs *after* enabling them.

Reply

Answer 4

no1tmorrow Author

Level 1

14 points

Aug 27, 2012 11:43 AM in response to bfdulock

If I go to Server -> File Sharing -> Click on the Share and choose "Edit Share Point" -> The "Share with Windows clients (SMB) is checked.

Then run the command

sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AclsEnabled -bool YES

When the user creates a folder from Windows in the shared folder it always gives user full privileges and no one else. Also puts the folder group as "wheel" which looks odd.

Thoughts now???? This simple task sure is frustrating.

Reply

Answer 5

Dec 12, 2012 3:42 PM in response to no1tmorrow

no1tmorrow have you solved this yet?

I've been having the issue at 2 clients since day one of the install.

Client 1 - running Lion Server with mix of Lion clients and Windows 7 Home Edition. On Windows if I create a file in Word, save it to the share, it shows as rw for owner. No one else has any access. The share is set to rw for everyone. Makes absolutley no sense!

Client 2 - running Mountain Lion Server mix of 10.5 - 10.8 clients. No Windows. Group is set to rw on the share. All users are in that group. User A copies a file to the share. User B, C and D can only read it. Again. Makes no sense. I had the same permissions setup on the G5 Xserve for SEVEN YEARS without issues on 10.4 Server.

Reply