Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacPro3dot1

macrumors newbie
Original poster
Jul 26, 2017
13
5
Help!!!

I have set up a little business network and ran into a major problem!
The is a MacMini as a file server with 10.13.3 and Server 5.5 running.
Two groups of users with different rights.

I just realized that you can connect to the server using cmd+K and you don't need to authenticate yourself. You just get access!! You then even see everything, all the folders you should not be able to see. Also subfolders that are supposed to have a little stop sign are wide open for everyone.

Each user has their own desktop computer, so the user and password are in the keychain. But you can delete that and still have access to the server! You just don’t get asked!!

The permissions all seem to be in order, I have checked on the Server app.

Has anybody an idea? Every help is much appreciated!
 
Which versions of macOS and macOS Server are you running? Are you sharing the files over SMB, AFP, or both?

You may want to try stopping sharing for those folders, then add them back in again and see if that fixes it.
 
In addition to the above - you might try running Batchmod to strip the permissions then reapply. Don't forget to propagate to subfolders.

Make sure your group memberships are correct.

If that doesn't work, sounds like it's time for a professional. This stuff can be tricky to set up right, but then it's likely set and forget.
 
Thanks for your replies.

The Server Mac Mini is running 10.13.3 with Server 5.5
The clients are all running 1
[doublepost=1517905091][/doublepost]Thanks for your replies.

The Server Mac Mini is running 10.13.3 with Server 5.5
The clients are all running 10.3.3 or 10.12.6

I stopped the sharing folders and added them back online. Didn't help :(
I turned the folders back online using just smb, afp, or both, didn't make any difference.
I also erased the stored login details on the client computer, but upon connecting to the server, I don't even get asked to authenticate :confused: It just connects to the folder!!

Permissions for the various users are all correct, but since you don't have to log in as a user, you can read and write in any folder! (although permission for everyone is set to none)
 
Are both the permissions under Server App - Storage Tab set correctly as well as the permissions under System Preferences - Sharing ?
 
I solved the Problem the old fashioned way: Deleting the hard drive and installing a completely fresh OS.
Since I had a partition for the OS and one for the data, the data was not affected. Then I just had to set up new users and new groups and voilà, everything works as it should!

One or two observations I made during research and setting up the new system:

Server 5.5 (well from 5.2 onwards) doesn't really do anything anymore (at least not for what I'm using it).
If you are running a simple data server for different clients, you do everything under system preferences nowadays.
Under system preferences > sharing > file sharing > shared folders you can ctrl+click on the data folder and under extended options you can enable a guest account for this folder(!).
I don't know whether I accidentally had this enabled and that was causing the problem.

Thanks everybody for your replies!
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.