Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

AFP home shares not honoring directory permissions

Description

Consolidating the issues reported in this community thread: https://www.ixsystems.com/community/threads/issues-getting-home-shares-working-with-ldap-in-11-3.82515/ - the current remaining/major issue is the resulting AFP home shares are not honoring the directory permissions defined in the configuration. They are configured for 755, but the resulting directories are created 000. The same issue seems to extend to the users themselves via the CLI so tagging both AFP & System components here.

Problem/Justification

None

Impact

None

SmartDraw Connector

Katalon Manual Tests (BETA)

Activity

Show:

Bug Clerk 
March 6, 2020 at 3:37 PM

Bug Clerk 
March 6, 2020 at 11:30 AM

Andrew Walker 
March 5, 2020 at 10:04 PM

I made a code change to prevent users from setting ACLs without inheritable entries. I have a separate WIP patch for the LDAP homes issue. You can try setting an auxiliary parameter for the LDAP configuration:

map homeDirectory "/mnt/tank/homes/$username"

T F 
March 5, 2020 at 12:30 AM

The "strip ACL" checkbox was blocked from being checked. I poked around and am now wondering if the above was from a default ACL that was being set without me specifying one?

I was ultimately able to add an ACL and get things working like so:

Andrew Walker 
February 28, 2020 at 9:19 PM
(edited)

Your permissions issue is caused by them being set by the ACL editor.:

The behavior you described is correct based on what was set. No ACL entries were set to inherit, ergo "000" on new file creation. Two choices are either to open the ACL editor, check the "strip ACL" checkbox and then use the "permissions" editor to set a POSIX mode or run the command "setfacl -b /mnt/Mirror01/TimeMachine01/home"

Complete

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Priority

More fields

Katalon Platform

Created February 28, 2020 at 6:21 PM
Updated July 1, 2022 at 4:50 PM
Resolved March 6, 2020 at 3:37 PM