macOS Mojave with server 5.7.1file sharing Group permissions problem :-(

hi

i have macOS Mojave with server 5.7.1 on Mac pro(Late 2013).

I'm running an updated server for the latest version.

To my question I did not find an answer through Google ...


I do several tests before moving the server to work.

The test on the server is performed from several computers, mainly from operating system 10.12.


I set up 3 users (A + B + C) and 2 groups (E + F) to check permissions Unfortunately permissions do not work properly.

And there seems to be a problem with the ACL and the permissions do not pass automatically.

The entrance was examined in two situations: AFP + SMB.


for example:

When User A logs on to the server and builds a folder / file, checking permissions on the file from the server is saved to User A and not to the Group Name (Group E).

Group: wheel - Permission: read only

All: everyone - permission: read only.


When user B enters the server and builds a folder / file, checking permissions on the file from the server is saved to user name B and not to the group name (group E).

Group: wheel - Permission: read only

All: everyone - permission: read only.



Arrange permissions through: System Prepernces / File Sharing and manual permissions changes: Apple Premissions to Enclosed Items.

Everything works out ... until the next user change.


I would be happy for help an experienced server user


Best regards

Benny

MacBook Air, macOS Sierra (10.12.6), Macintosh Plus,PB 400Hhz black, PB 867, iMac G3, OSX Server5

Posted on Oct 8, 2018 9:18 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 15, 2019 7:35 PM

Hey guys I found this related information from high sierra server that helped me and it appears to work for keeping inherited permissions.


Firstly enable ACL permissions for SMB shares with the following command.



Sharing modification via terminal to engage ACLs



sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AclsEnabled -bool YES


Then set up inheritance permissions on the parent holder with the following command. This should recursively go through your share and apply the relevant permissions.



sudo chmod -R +a "group:REPLACE_WITH_YOURGROUP_NAME:allow readattr,writeattr,readextattr,writeextattr,readsecurity,list,search,add_file,add_subdirectory,delete_child,file_inherit,directory_inherit" REPLACE_WITH_PATH_TO_PARENT_SHARED_FOLDER

118 replies

Dec 19, 2018 2:11 PM in response to Ryan Burkholder

Yes... Apple loosing the right way. And this way doesnt contains any other solutions for pro users. This time apple is just a phone and tablet maker... if you hear us TIM help and give:

  • macOS Ultimate Server Software
  • mac Server hardware
  • new macpro for pro users

And if you have a little bit more free time please give us your iCloud like a Office365

Thank You!

Jan 2, 2019 1:47 PM in response to Ryan Burkholder

Hi Ryan,


I'm connecting via SMB.


Strange is that with pages files for example the .pages suffix appears, when it didn't appear before. Also a space appears before the dot, the avatar returns to the default pages avatar and not the preview. The message I get is the file format is invalid.


I have to redo the "permission to subfolders" process to put everything back in order.


Jan 8, 2019 8:21 AM in response to dalenorman2005

Ok, so I moved all the files to an external drive fomatted as HFS+.


No change, regularly, I have to revalidate folder permissions because some files appear as Invalid format to the other users, the original user (last one who made changes) can open the file perfectly.


So it's apparently not an issue with afps but with the security protocol with which macos Mojave manages permissions.


How do I get back to High Sierra??? :-(


Jan 18, 2019 12:30 PM in response to jlantrip

Hi jlantrip,

I did the first command, entered correct password, then

sudo chmod -R +a "group:Programme\ ext:allow readattr,writeattr,readextattr,writeextattr,readsecurity,list,search,add_file,

add_subdirectory,delete_child,file_inherit,directory_/Volumes/Shared\ Folders/Programmes\ ext

"Programmes ext" being the shared folder,

and it just hangs on >

Am I doing something wrong?

Jan 21, 2019 5:35 AM in response to jlantrip

Hello jlantrip,

This is the result I got today with what seems to be a "lesson" of how to enter the command line correctly... ;-)

serveur-korke:~ korke$ sudo chmod -R +a "group:programmesext allow readattr,writeattr,readextattr,writeextattr,readsecurity,list,search,add_file,add_subdirectory,delete_child,file_inherit,directory_inherit"/Volumes/Shared\ Folders/Programmes\ ext

usage: chmod [-fhv] [-R [-H | -L | -P]] [-a | +a | =a [i][# [ n]]] mode|entry file ...

chmod [-fhv] [-R [-H | -L | -P]] [-E | -C | -N | -i | -I] file ...

serveur-korke:~ korke$




This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

macOS Mojave with server 5.7.1file sharing Group permissions problem :-(

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.