Register FAQ / Rules Forum Spy Search Today's Posts Mark Forums Read
Go Back   MacRumors Forums > Apple Systems and Services > OS X > Mac OS X Server, Xserve, and Networking

Reply
 
Thread Tools Search this Thread Display Modes
Old Jan 21, 2013, 02:51 AM   #1
JimboStormforce
macrumors newbie
 
Join Date: Jul 2012
Permissions Difficulties - Users can't do certain things

I am responsible for a Mac Mini Server environment someone else set up, and every so often something throws me a curveball.

Some of our network users (and it turns out this has been the case for nearly a year) can't do things like open Mail (they don't have permission to the relevant library folder) and things like delete or move files.

I've been through all the permissions (both Posix by right clicking and get Info and ACL through Server.App) on each users home folder, and have ensured that the user seems to have the right access, and is the owner.

One of the quirks I've discovered is that on the ACL for each user who works, there is a user called 'root' with Read Write access. Trying to add this root user for the others doesn't work as it doesn't seem to be on the system.

I'm running out of options and knowledge here - does anyone know of a good guide to clearing all ACLs and Permissions on a network user's home folder, and then rebuilding them?

Cheers!
JimboStormforce is offline   0 Reply With Quote
Old Jan 22, 2013, 07:08 AM   #2
JimboStormforce
Thread Starter
macrumors newbie
 
Join Date: Jul 2012
So, I've spent the day clearing all permissions on the folders via the command line (or I think that's what I've done) whether POSIX or ACL, and then trying to apply new permissions that should be correct.

No dice.
JimboStormforce is offline   0 Reply With Quote
Old Jan 23, 2013, 03:41 AM   #3
JimboStormforce
Thread Starter
macrumors newbie
 
Join Date: Jul 2012
I've now started to view the permissions using terminal (which I'm no expert with), and find something interesting.

If I do ls -ld myHomeFolder (which works!) I get:
Quote:
drwxrwxr-x+ 39 root admin 1282 23 Jan 09:31 Mail
As an example on the Mail folder (which is one of the ones causing problems. If I do this for another user, I get:
Quote:
drwxrwxr-x+ 11 adamoneill admin 330 17 Jan 10:07 Mail
So, the POSIX permissions look the same, the ACLs might be different, but the owner is different. adamoneill owns his own folder, but root owns my folder.

Most odd.

----------

Listing the ACLs gives me:

Quote:
drwxrwxr-x+ 39 root admin 1282 23 Jan 09:31 Mail
0: user:jimbodavies allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,reads ecurity
for my home folder, and

Quote:
drwxrwxr-x+ 11 adamoneill admin 330 17 Jan 10:07 Mail
0: user:root allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,reads ecurity
for adamoneill. So, it looks like the owner and user are swapped round.
JimboStormforce is offline   0 Reply With Quote
Old Jan 23, 2013, 07:48 AM   #4
JimboStormforce
Thread Starter
macrumors newbie
 
Join Date: Jul 2012
Well, after much googling, I fixed it.

I went in to Terminal on the server, and used chown to change the owner to root, and the group to admin on each user's home folder.

I then used chmod -RN to strip all the ACLs from each user.

I then user Server.app to add each network user to their home folder with Read, Write access, and propogated those permissions as an ACL.

Seems (touch wood) to be working.
JimboStormforce is offline   0 Reply With Quote

Reply
MacRumors Forums > Apple Systems and Services > OS X > Mac OS X Server, Xserve, and Networking

Tags
acl, network, posix, server

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 10:31 PM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC