NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

nassreddin's avatar
nassreddin
Aspirant
Jan 23, 2012

CIFS permissions/shares work great, but FTP fails

Hi all,
We have a share (ReadyNAS Duo) in our office that we set up on one Mac and one Win machine, using CIFS. We've also enabled FTP for external access. The access controls are all open, everyone has read/write access, and under advanced options "Grant rename and delete privileges to non-owner of files." Also, the NAS is set to override all pemissions with read/write. The problem is, when we drag and use files in CIFS, all is ok. But when another user uploads via FTP, the permissions are all screwed up and we cannot rename, delete, sometimes even open the file! Every time that happens, I have to log into Frontview and check "Set ownership and permission for existing files and folders in this share to the above settings. This option is useful in cases where you are changing security levels and need to workaround file access problems.". Then everything works. Its very frustrating, and I have to sometimes do it 5,6 times daily. Can I do anything to prevent this? Is it something in the FTP client the user is working?

4 Replies

Replies have been turned off for this discussion
  • Can you explain what you mean? Yes you need to log in with a username/pass but according to settings all permissions should be read/write for everyone.. Unless i'm doing it wrong?
  • I have the same problem. I have one share which is FTP enabled (and CIFS of course), and when uploading stuff to that share from an FTP client, I can't do anything with it through CIFS, when logging in with the regular username. I haven't tried logging in to the local network with the FTP user name yet (I use the same ID and pass for all who accesses the FTP). When logging in with an FTP client on the same LAN (with the FTP user name), I can do everything. It seems as if the FTP user name has become the admin of that share somehow. I don't have any groups configured on the ReadyNAS, only individual users.

    Here is the setup for the FTP share (note that I have the Swedish UI, so the options might be sligthly differently worded in English than what I have written below):

    One user account with password that is given to those who need access to the FTP share.

    CIFS
    Default access: Read/write

    Restrictions to shared access
    Everything unchecked except Allow guest access

    Advanced CIFS permissions
    Set permissions automatically for new files and folders: checked
    Do not allow ACL changes that are more restrictive than this: checked
    Group rights: Read/write
    Rights for everyone: Read/write

    Oplock: checked

    FTP/S
    Default access: Read/write
    Everything else unchecked

    Advanced options
    Owner of share folder: <share name>
    Group of share folder: nogroup
    The three permissions options are all set to read/write.

    Grant users who don't own the files privileges to change names and remove data: checked

    I would like to have some kind of visual overview of which users have what kind of rights to what shares. Could be presented as a simple matrix. On the other hand it might not be possible for more advanced configurations.

    Anyway, I guess my question would be: How do I grant the 'normal' users (not the FTP user) CIFS access to the FTP share permanently? We do have sometimes, not just if the FTP user has uploaded something to the FTP share, then we need to log in with the FTP user through an FTP client, even when being on the same LAN as the NAS. Viewing is allowed, but nothing else.
  • @Dama,
    I solved it with the following settings :

    CIFS
    Default access: Off / Disabled
    Users with write access: me
    Guest access: Unchecked

    Advanced CIFS permissions
    Set permissions automatically for new files and folders: checked
    Do not allow ACL changes that are more restrictive than this: unchecked
    Group rights: Read/write
    Rights for everyone: Disabled

    Oplock: checked

    FTP/S
    Default access: Off / Disabled
    Users with write access: me

    Advanced FTP permissions
    Group rights: Read/write
    Rights for everyone: Read Only


    And it was only after I set the rights for everyone to "Read Only" that I was able to read / view the files that were put on my NAS by FTP ...

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More