How do I repair permissions for a network home folder on a non-startup volume?

Question

Level 1

4 points

How do I repair permissions for a network home folder on a non-startup volume?

Hi Everyone,

I would like to reset the permissions and ACLs for a portable home folder/network account on my server (Late-2014 Mac mini, 3 GHz Core i7, 16 GB RAM, 1 TB Flash, 2 TB WD My Book VelociRaptor Duo thunderbolt data drive, Yosemite 10.10.4, Server 4.1.3). The resetpassword utility in the recovery volume will not do this because (a.) it's a network/mobile account and (b.) it's on the server's data drive, not the startup volume. I found this thread (Re: Can I reset home folder permissions when it's on a separate drive?) with what seems like an excellent procedure from Linc Davis for resetting the permissions of home folders on non-startup drives. I'm just wondering if permissions and ACLs for network accounts should be any different from local accounts. Will I need to modify the terminal command that Mr. Davis recommends or will it work just as well for a network account?

Thanks in advance for any help,

M. D. Skell

OS X Yosemite (10.10.4), 3 GHz Core i7, 16 GB RAM, 1TB Flash

Posted on Aug 1, 2015 4:12 PM

Reply

Answer 1

cdhw

Level 4

3,588 points

Aug 2, 2015 6:09 PM in response to M. D. Skell

As long as you run the Linc Davis recipe on the server, not on the client that has mounted the volume, I don't see why it shouldn't work okay.

To be sure you'll need to do the experiment. Create a new network account dummy1, which will have good settings. Create a second one dummy2 and mess up its ACLs and permissions. Use the LD recipe to fix dummy2. See whether the fixed dummy2 matches dummy1, and decide whether any differences matter enough to be worth fixing.

C.

Reply

Answer 2

M. D. Skell Author

Level 1

4 points

Aug 2, 2015 6:46 PM in response to cdhw

Thanks for the reply, C. Great suggestion about the dummy accounts. I'll try that before doing anything with the main account. I do, of course, plan to run this on the server rather than the client. The network accounts are located on the server's data drive, not the start-up volume, though.

I'll see how this works and post the results.

Best,

M. D. Skell

Reply