Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Benny2g Author

Level 1

13 points

macOS Mojave with server 5.7.1file sharing Group permissions problem :-(

i have macOS Mojave with server 5.7.1 on Mac pro(Late 2013).

I'm running an updated server for the latest version.

To my question I did not find an answer through Google ...

I do several tests before moving the server to work.

The test on the server is performed from several computers, mainly from operating system 10.12.

I set up 3 users (A + B + C) and 2 groups (E + F) to check permissions Unfortunately permissions do not work properly.

And there seems to be a problem with the ACL and the permissions do not pass automatically.

The entrance was examined in two situations: AFP + SMB.

for example:

When User A logs on to the server and builds a folder / file, checking permissions on the file from the server is saved to User A and not to the Group Name (Group E).

Group: wheel - Permission: read only

All: everyone - permission: read only.

When user B enters the server and builds a folder / file, checking permissions on the file from the server is saved to user name B and not to the group name (group E).

Group: wheel - Permission: read only

All: everyone - permission: read only.

Arrange permissions through: System Prepernces / File Sharing and manual permissions changes: Apple Premissions to Enclosed Items.

Everything works out ... until the next user change.

I would be happy for help an experienced server user

Best regards

Benny

MacBook Air, macOS Sierra (10.12.6), Macintosh Plus,PB 400Hhz black, PB 867, iMac G3, OSX Server5

Posted on Oct 8, 2018 9:18 AM

Best reply

Benny2g Author

Level 1

13 points

Posted on Oct 9, 2018 6:01 AM

After searching Google I found:

That version 5.4 had a "storage" tab that could be modified to ACL permissions. Unfortunately in version 5.7.1 the tab no longer exists.

version 5.7.1:

version 5.4(pict from google 5.3.55):

If there is a "server specialist"?

I would be happy to help

Best regards

Benny

View in context

118 replies

ahawkes

Level 1

4 points

May 30, 2019 2:10 PM in response to ddssgg

I would also consider turning off SIP while you're solving any problems with permissions. SIP reduces root's ability to make changes to certain system folders and could be interfering, even if your tools are using sudo.

Boot into recovery mode and open terminal. It will ask for an admin password. In the terminal enter

csrutil disable <return>

reboot <return>

You can undo this with

csrutil enable

Jun 10, 2019 7:42 AM in response to ahawkes

hello all,

Ok, so now everything is working fine. Permissions are ok.

But when someone adds a file to a folder with set permissions, it doesn't automatically inherit the permissions from the folder. Even after resetting all the permissions of the folder and files, if I add a file this file just keeps the initial creator's permissions, and doesn't inherit the parent folder's permissions.

Anyone know why that is?

ahawkes

Level 1

4 points

Jun 18, 2019 2:52 PM in response to stuarta99

@MarkDannau:

You might have already checked this, but you have to specify AFP for each share in System Preferences > Sharing (select share) then click Options.

And I've seen that check come unchecked unintentionally more than once. I want to say it might have been an update that did it to me, but I can't be sure.

And hopefully you already know that you CANNOT share a folder using AFP if the folder is sitting on an APFS disk. Apple does not allow it.

Jun 19, 2019 12:28 AM in response to ahawkes

Ok thanks. The folder is shared correctly from there and oddly it works for 2 users fine. It's a similar issue I found previously when some users had their passwords changed and couldn't see the shares. The fix then was to grant 'everyone' read access to the top level but this is random that it works for 2 users on AFP/SMB but then this one user, she only sees it if she connects via SMB.

Problem is they can't use Spotlight correctly using SMB

Jan 17, 2019 1:55 PM in response to Ryan Burkholder

SMB is deactivated. We connect to the shared folders with afp://10.0.1.3 and remotely with afp://xxx.com:549 (doesn't work with 548).

Benny2g Author

Level 1

13 points

Oct 11, 2018 1:30 AM in response to Benny2g

Up!

If there is a "server specialist"?

I would be happy to help

Best regards

Benny

Dec 23, 2018 9:01 AM in response to Benny2g

Is your share; having the AFP issue, on an AFSP volume?

Jan 2, 2019 1:12 PM in response to Mark Dannau

Are you connecting via AFP or SMB with the ones having issues?

Jan 2, 2019 1:53 PM in response to Mark Dannau

Can you force your clients to connect via AFP and see if that helps? Use the "Connect to Server" option and format the server address with afp://(your server address).

Jan 2, 2019 2:01 PM in response to Ryan Burkholder

connecting to afp://10.0.1.3 get's me a "...connection to server 10.0.1.3 failed..".

Tried with 10.0.1.3:548, same story.

Jan 2, 2019 2:05 PM in response to Mark Dannau

I could not enable AFP on a AFPS volume. Irony? During troubleshooting, I formatted an external SSD as HFS+ which allowed me to enable AFP on that volume.

Kev_Op

Level 1

4 points

Jan 8, 2019 8:29 AM in response to dalenorman2005

I have been discussing it with AppleCare Enterprise Support over the last few weeks, They are aware, No fix offered as yet.

Jan 8, 2019 8:54 AM in response to Kev_Op

Thanks Kev_Op, please keep this thread updated with any progress you make with Apple Enterprise Support. much appreciated.

Jan 8, 2019 9:03 AM in response to Mark Dannau

But did you connect the clients vis AFP and not Apple’s default of SMB?

Jan 8, 2019 9:04 AM in response to Kev_Op

But did you connect the clients via AFP?

macOS Mojave with server 5.7.1file sharing Group permissions problem :-(