× NETGEAR will be terminating ReadyCLOUD service by July 1st, 2023. For more details click here.
Orbi WiFi 7 RBE973
Reply

AFP on 6.2.2 share permissions broken?

eye1
Aspirant

AFP on 6.2.2 share permissions broken?

I have only AFP and HTTP turned on for shares. When I create a new share, the defaults do not allow a local user to add items to a subfolder that another user created (both are members of "users" group).

I think this is odd behavior as I would expect the default "Everyone" r/w access to allow local users to do anything. (Doesn't it work this way for SMB shares?)

default new AFP + HTTP shares:
drwxrwxrwx+ 1 guest guest

new subfolder in that share that won't allow anyone but froggy to add things to it (created by Mac OS X finder in the mounted share):
drwxrwsr-x+ 1 froggy users


I finally figured out the simplest change to make it work is uncheck "Everyone", then check "users" r/w. This sets File Access as r/w to: "Folder Owner", "Folder Group", "users", "guest"(group), "guest"(user)

shares have:
drwxrwx---+ 1 guest guest

subfolders have:
drwxrwsrwx+ 1 froggy users

The difference is that "other" now has no access to shares but has write access to subfolders. The unix permissions confuse me because froggy is not a member of the "guest" group, so shouldn't have access to the share. And for some reason, the added write permission on subfolders for "other" now allows another member of "users" to write into froggy's subfolder. This should have already been possible (but it wasn't) since they are both members of "users" group.

Is this the intended behavior for ReadyNAS?

Notice the setgroup-ID mode for subfolders. I left the "Grant rename..." as default checked.

Any advice on best settings for a household with several local Mac users (no PCs) would be appreciated.
thanks
Message 1 of 4
eye1
Aspirant

Re: AFP on 6.2.2 share permissions broken?

I also found this related topic:
http://www.readynas.com/forum/viewtopic.php?f=28&t=75853

It suggests changing the umask on all Macs, which is not something I want to do. The other option is "Tick Specify permission when new file/folder is created" which doesn't appear to be a real fix.
Message 2 of 4
ericchu
Aspirant

Re: AFP on 6.2.2 share permissions broken?

I'm also having some strange problems with permissions. I used rsync to backup files onto another ReadyNAS running OS 6.2.2. While most of the files have the right permissions with read/write for everyone, some of the files/folders has read only.... I tried this with both AFP and SMB. This problem is with existing default shares such as Pictures, Videos, Music, & Documents. Not new shares that I create...

From the Mac, when I connect/mount the drive as "admin" with the right password, I still do not have the access rights to change the "read only" folders/files. I also looked from the FrontView web UI and can't find anything wrong with read/write checked for everyone.

Please help...
Message 3 of 4
StephenB
Guru

Re: AFP on 6.2.2 share permissions broken?

ericchu wrote:
I'm also having some strange problems with permissions. I used rsync to backup files onto another ReadyNAS running OS 6.2.2. While most of the files have the right permissions with read/write for everyone, some of the files/folders has read only.... I tried this with both AFP and SMB.

From the Mac, when I connect/mount the drive as "admin" with the right password, I still do not have the access rights to change the "read only" folders/files. I also looked from the FrontView web UI and can't find anything wrong with read/write checked for everyone.

Please help...
Perhaps try resetting the permissions and owner/group with from the web ui (everything will be guest/guest with full access) or with ssh (set how you chose)
Message 4 of 4
Top Contributors
Discussion stats
  • 3 replies
  • 2076 views
  • 0 kudos
  • 3 in conversation
Announcements