Samba is sharing my root (and I don't want that)

Question

Level 1

0 points

Samba is sharing my root (and I don't want that)

I'm having a problem with OSX 10.8.2 Server, any SMB user always has the system drive available as a share ie "Server HD". I don't have that share enabled either in the file sharing tab of Server or in the Sharing preference pane. If I connect via AFP the Server HD is not available. However its always there when connected via SMB. What is going on? I have three OSX 10.8 servers and they all have the same behavior.

Mac mini, OS X Mountain Lion (10.8.2)

Posted on Jan 17, 2013 5:36 PM

Reply

Answer 1

FromOZ

Level 3

554 points

Jan 18, 2013 7:02 AM in response to thedukeness

Run this command from terminal (copy paste it) on your server

sudo serveradmin settings sharing

and see what settings are configured for sharing.

Reply

Answer 2

thedukeness Author

Level 1

0 points

Jan 18, 2013 11:17 AM in response to FromOZ

Looks ok there:

bash-3.2# serveradmin settings sharing

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:dsAttrTypeStandard\:Ge neratedUID = "75FC575E-F582-4A79-B6CB-5C9D83259590"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbName = "Groups"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:afpIsGuestAccessEnable d = no

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbDirectoryMask = "0755"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:afpName = "Groups"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbCreateMask = "0644"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:nfsExportRecord = _empty_array

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:path = "/Volumes/Userdata/Groups"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbUseStrictLocking = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbIsGuestAccessEnable d = no

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:name = "Groups"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbInheritPermissions = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:ftpName = "Groups"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbIsShared = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:afpIsShared = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:isTimeMachineBackup = no

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:smbUseOplocks = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:dsAttrTypeNative\:shar epoint_group_id = "18704FF6-4806-4B39-ADF1-B4309AA505A4"

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:isIndexingEnabled = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Groups:mountedOnPath = "/Volumes/Userdata"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:dsAttrTypeStandard\:Gen eratedUID = "AFACF5D4-5852-4285-B544-9A46783B407C"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbName = "Users"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:afpIsGuestAccessEnabled = no

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:automountMountPath = "/Network/Servers"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:automountFileSystemType = 0

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:automountHasMount = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbDirectoryMask = "0755"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:mountedOnPath = "/Volumes/Userdata"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:afpName = "Users"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbCreateMask = "0644"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:nfsExportRecord = _empty_array

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:path = "/Volumes/Userdata/Users"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbUseStrictLocking = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbIsGuestAccessEnabled = no

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:name = "Users"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbInheritPermissions = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:ftpName = "Users"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbIsShared = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:afpIsShared = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:isTimeMachineBackup = no

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:smbUseOplocks = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:isIndexingEnabled = yes

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:automountDSPath = "/LDAPv3/127.0.0.1"

sharing:sharePointList:_array_id:/Volumes/Userdata/Users:dsAttrTypeNative\:share point_group_id = "E0755737-DB5E-4BD8-945F-0BE91CF36493"

Reply

Answer 3

FromOZ

Level 3

554 points

Jan 19, 2013 2:45 AM in response to thedukeness

The SMB implementation changed in Lion from Samba to an in-house Apple solution 'SMBX'. So if you are running vanilla OS X 10.8.2 Server 2.2 then you will not be running Samba, but SMBX. If you do an Internet search on — "OS X" SMBX — you will find a lot of info.

From your server terminal you can execute:

man smbd or man smbutil

To see a list of SMB shares on your server use the command below replace name for your server. In my server app UI I have defined the default file shares - Groups, Server Public & Users. As you can see there are four more. One of which says 'Macintosh HD', sounds ominous.

$ smbutil view //your_server_name

Password for your_server_name:

Share Type Comments

-------------------------------

Groups Disk

Server Public Disk

Users Disk

Data Disk

Administrator Disk

Macintosh HD Disk

IPC$ Pipe

7 shares listed

The new SMBX implementation is NOT (that I see) using the previous (Linux sort of standard flavour) smbd.conf file to define sharepoints.

If I look at the files for smbd (the new Apple SMBX daemon) as listed in man smbd

FILES

/Library/Preferences/SystemConfiguration/com.apple.smb.server.plist

The primary configuration for the SMB stack. This file is updated by various system services and should not be edited by hand.

/System/Library/LaunchDaemons/com.apple.smbd.plist

The smbd service's property list file for launchd(8).

I do not see any sharepoints listed. Obviously there is some configuration file somewhere which lists sharepoints but I have not found yet.

BTW if you want to complain about the change in functionality regarding SMB you should not blame Apple but the 'Free' Software Foundation and its GPL 3. They have effectively managed to limit your freedom to use the software you want/need because Samba is now licenced under the onerous terms of GPL 3 apparently requiring Apple to rip it out of OS X Server.

Reply

Answer 4

UptimeJeff

Level 4

3,479 points

Jan 19, 2013 6:54 AM in response to thedukeness

If I rememnber right, an admin user sees all volumes, but standard users should not.

Did you compare standard vs admin user?

Reply

Answer 5

mncrnich

Level 1

0 points

May 31, 2013 10:22 AM in response to thedukeness

I am having the same issue. Mountain Lion Server native SMB is sharing every disk on server even though I have only specified two share points.

Users connecting have admin access. All workstations have same user account. Both OS X & WIN7. The account has admin rights.

Due to other native ML Server SMB issues, I am investigating de-activating in favor of SMBup or similar.

Reply