Permissions not propagating on share

Greetings all!

I'm sure this is some stupid noob issue - and regretfully I am mostly a windows guy so maybe I'm just not getting the big picture here.

I am running server 10.6.2 - I have this machine setup as a OD Master and a windows PDC with AFP, DNS, iChat, OD, and SMB all turned on. This is the only server on the network.

I have a folder I'll call 'Public'. I have a group called 'Users' and I have several users one of which is me, 'karatehero'. When I look at my user entry, I see that I am a member of the 'Users' group, and only the users group.

I went into Server Admin and shared my 'Public' directory to 'Users' and gave that group full control. When I look at the share in Server Admin now, I see

ACL
Workgroup - Permissions: Custom - Applies to: This folder, Child folders, Child files, All Descendants
Users - Permissions: Full Control - Applies to: This folder, Child folders, Child files, All Descendants
Spotlight - Permissions: Custom - Applies to: Child folders, Child files, All Descendants
POSIX
Root - Read & Write - Apples to: This folder
wheel - Read & Write - Apples to: This folder
others - Read & Write - Apples to: This folder

My goal was to have all the users in the 'Users' group have full control of all the items and subfolders in that file.

This worked initially, but now I see that when I map that drive as myself via SMB, most but not all of the folders have the red '-' next to them. When I look at that folder from the server, I see the following permissions:
workgroup - custom
users - custom
_spotlight - custom
admin (me) - Read & write
admin - Read & write
everyone - no access

I would imagine that is setup correctly, and I shoudl be able to get into the folder, but I can't. If this were the windows world, I would scratch my head and reformat. I'm not sure why this happened to all these files. Why my permissions are setup on the share as 'Full Control' and the subfolders are 'custom' is strange to me.

I notice there is a 'propagate permissions' option when I highlight my share and click the gear. Shoudl I do that? Why would I need to?

Thanks in advance all! I'm kinda stuck here!

I'm just curious, where did that come from? I never added it, how did something like that get there?

I will try that and update.

Thanks!

OK. Although, how does the 'Users' group get added if the Workgroup group is there? I mean, Users coudl have been named 'CoalMiners' or something - I never associated it.

Either way - I reordered the groups to make "users" at the top of the list, and made sure it was set to full control - and I still can't get into certain folders and items. No change.

I guess what I'm wondering is if I propagate my ACLs to all subfolders - shouldn't all permissions be the same for all children if set that way?

BTW - I've also noticed that the groups that are giving me issues when I look at their get info has a group at the top of the access list. The group is above 'users' and is named 704224ee-fdff-....... and has a custom level of control. This wasn't there before I propagated things, but nothing has changed.

Am I missing something?

Thanks!

Am I propagating the wrong thing? I'm only propagating ACLs. Should I propagate more than that? Groups, owners?

Thanks so much for the reply!

I had a feeling thats how it worked - I wasn't sure how the ACL and Posix fought it out, so thanks for detailing that for me!

Thing I'm confused on is this - I picked a sub folder in that share. Right now when I connect to it via go -> connect to server -> smb://server/share and I put in my creds, the sub folder says I have no permissions. When I look at it in the Effective permission inspector and put myself in, it says I have full control of the sub folder.

Is there some magic with the SMB share that I'm not aware of?

On the root share I have all permissions but delete. That share is listed as Shared Items/Public

On the drive, I have read only premissions via the inspector.

For the subfolder I have full permissions. That woudl be Shared Items/Public/folder

Well, I'm guess then that my share and/or server is fubar'd. That really stinks being as I just built it and got them moved to it only a few months ago.

I mean, if the permission inspector says I shoudl have full access to a folder, and when I go to it, it says I have none - I would think something is wrong there.

Any last ditch thoughts?

Well, I got one book already and read everything it said about ACEs ACLs and POSIX stuff. I read all about inheritance, and went all through the demos they gave you. Thats exactly what I have now - and it doesn't match up.

For some reason my permission inspector and the actual permissions I'm getting don't match up. I've went to apple already, and their suggestion is the same as always, reformat and start over. Obviously, for a company that has billions in reserve, thats a great idea, but for the rest of the world.

As I said, it appears to be fubar'd. I wouldn't be here if I didn't need help. If thats it, I honestly thank you for all your time. I just don't know where else to go.

No sarcasm intended, but honestly, thanks for helping! I just might trash all my shares and start over. I dont' know what else to do!

I got it.

OSX doesn't connect to a SMB share the same way that a windows machine does. When I connect with my windows machine, it works fine. When I connect with my mac machine, its all screwed up.

I'm going to share those files via AFP also, so my mac users can get into them and all should be good!

Thanks for the help, I really do apprecaite it! I never would have thought that was the problem. Apple didn't even know!

Thanks again!