Reply
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
AFP on 6.2.2 share permissions broken?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2015-01-01
06:43 PM
2015-01-01
06:43 PM
AFP on 6.2.2 share permissions broken?
I have only AFP and HTTP turned on for shares. When I create a new share, the defaults do not allow a local user to add items to a subfolder that another user created (both are members of "users" group).
I think this is odd behavior as I would expect the default "Everyone" r/w access to allow local users to do anything. (Doesn't it work this way for SMB shares?)
default new AFP + HTTP shares:
drwxrwxrwx+ 1 guest guest
new subfolder in that share that won't allow anyone but froggy to add things to it (created by Mac OS X finder in the mounted share):
drwxrwsr-x+ 1 froggy users
I finally figured out the simplest change to make it work is uncheck "Everyone", then check "users" r/w. This sets File Access as r/w to: "Folder Owner", "Folder Group", "users", "guest"(group), "guest"(user)
shares have:
drwxrwx---+ 1 guest guest
subfolders have:
drwxrwsrwx+ 1 froggy users
The difference is that "other" now has no access to shares but has write access to subfolders. The unix permissions confuse me because froggy is not a member of the "guest" group, so shouldn't have access to the share. And for some reason, the added write permission on subfolders for "other" now allows another member of "users" to write into froggy's subfolder. This should have already been possible (but it wasn't) since they are both members of "users" group.
Is this the intended behavior for ReadyNAS?
Notice the setgroup-ID mode for subfolders. I left the "Grant rename..." as default checked.
Any advice on best settings for a household with several local Mac users (no PCs) would be appreciated.
thanks
I think this is odd behavior as I would expect the default "Everyone" r/w access to allow local users to do anything. (Doesn't it work this way for SMB shares?)
default new AFP + HTTP shares:
drwxrwxrwx+ 1 guest guest
new subfolder in that share that won't allow anyone but froggy to add things to it (created by Mac OS X finder in the mounted share):
drwxrwsr-x+ 1 froggy users
I finally figured out the simplest change to make it work is uncheck "Everyone", then check "users" r/w. This sets File Access as r/w to: "Folder Owner", "Folder Group", "users", "guest"(group), "guest"(user)
shares have:
drwxrwx---+ 1 guest guest
subfolders have:
drwxrwsrwx+ 1 froggy users
The difference is that "other" now has no access to shares but has write access to subfolders. The unix permissions confuse me because froggy is not a member of the "guest" group, so shouldn't have access to the share. And for some reason, the added write permission on subfolders for "other" now allows another member of "users" to write into froggy's subfolder. This should have already been possible (but it wasn't) since they are both members of "users" group.
Is this the intended behavior for ReadyNAS?
Notice the setgroup-ID mode for subfolders. I left the "Grant rename..." as default checked.
Any advice on best settings for a household with several local Mac users (no PCs) would be appreciated.
thanks
Message 1 of 4
Labels:
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2015-01-02
10:32 AM
2015-01-02
10:32 AM
Re: AFP on 6.2.2 share permissions broken?
I also found this related topic:
http://www.readynas.com/forum/viewtopic.php?f=28&t=75853
It suggests changing the umask on all Macs, which is not something I want to do. The other option is "Tick Specify permission when new file/folder is created" which doesn't appear to be a real fix.
http://www.readynas.com/forum/viewtopic.php?f=28&t=75853
It suggests changing the umask on all Macs, which is not something I want to do. The other option is "Tick Specify permission when new file/folder is created" which doesn't appear to be a real fix.
Message 2 of 4
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2015-01-02
04:35 PM
2015-01-02
04:35 PM
Re: AFP on 6.2.2 share permissions broken?
I'm also having some strange problems with permissions. I used rsync to backup files onto another ReadyNAS running OS 6.2.2. While most of the files have the right permissions with read/write for everyone, some of the files/folders has read only.... I tried this with both AFP and SMB. This problem is with existing default shares such as Pictures, Videos, Music, & Documents. Not new shares that I create...
From the Mac, when I connect/mount the drive as "admin" with the right password, I still do not have the access rights to change the "read only" folders/files. I also looked from the FrontView web UI and can't find anything wrong with read/write checked for everyone.
Please help...
From the Mac, when I connect/mount the drive as "admin" with the right password, I still do not have the access rights to change the "read only" folders/files. I also looked from the FrontView web UI and can't find anything wrong with read/write checked for everyone.
Please help...
Message 3 of 4
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2015-01-02
04:51 PM
2015-01-02
04:51 PM
Re: AFP on 6.2.2 share permissions broken?
Perhaps try resetting the permissions and owner/group with from the web ui (everything will be guest/guest with full access) or with ssh (set how you chose)
ericchu wrote: I'm also having some strange problems with permissions. I used rsync to backup files onto another ReadyNAS running OS 6.2.2. While most of the files have the right permissions with read/write for everyone, some of the files/folders has read only.... I tried this with both AFP and SMB.
From the Mac, when I connect/mount the drive as "admin" with the right password, I still do not have the access rights to change the "read only" folders/files. I also looked from the FrontView web UI and can't find anything wrong with read/write checked for everyone.
Please help...
Message 4 of 4