*New 11.3 series Release:
2019-10-19: XigmaNAS 11.3.0.4.7014 - released

*New 12.0 series Release:
2019-10-05: XigmaNAS 12.0.0.4.6928 - released!

*New 11.2 series Release:
2019-09-23: XigmaNAS 11.2.0.4.6881 - released!

We really need "Your" help on XigmaNAS https://translations.launchpad.net/xigmanas translations. Please help today!

Producing and hosting XigmaNAS costs money. Please consider donating for our project so that we can continue to offer you the best.
We need your support! eg: PAYPAL

OS X El Capitan AFP shares to NAS4Free no longer have ACLs

NAS4Free & Apple Filing Protocol.
Forum rules
Set-Up GuideFAQsForum Rules
Post Reply
newyork10023
NewUser
NewUser
Posts: 7
Joined: 16 Jan 2016 07:41
Status: Offline

OS X El Capitan AFP shares to NAS4Free no longer have ACLs

#1

Post by newyork10023 » 14 Jan 2017 10:03

We use to have no problems and everything worked. Currently, we use all the latest versions of all software involved.

Our Mac OS X El Capitan clients are bound to an OS X Server Open Directory ("green light in Users&Groups). Able to browse the OD in Directory Utility. Login with a Network Directory account to the OD succeeds. The NAS4Free box shows all user and groups on the OD when logged in through SSH as root (i.e., getent passwd and getent group work). Directory listings on the NAS4Free server show correct user/group ACLs.

But... when an AFP connection from the OS X client using Finder to NAS4Free is made, there are no ACLs. We use to get correct user and group information in Finder -> Get Info. And, now, from the shell, a directory listing (i.e., ls -laed@ /Volumes/server/share ) does not show any ACL information and the group owner of all files is "staff" (incorrect). I've tried mount_afp from the shell, no change. I've tried mounting into different directory, no change.

I tried to mount the AFP share to NAS4Free with Path FInder, no change. I inspected the ACLs using Tinker Tools, no ACLs.

Has anyone run into this issue (and have a fix)?

NeilP
Advanced User
Advanced User
Posts: 220
Joined: 15 Jul 2012 11:45
Location: Jersey, Channel Islands, Europe
Status: Offline

Re: OS X El Capitan AFP shares to NAS4Free no longer have ACLs

#2

Post by NeilP » 30 Mar 2017 10:58

your lucky you can even get a Mac to connect to an AFP share !

With El Cap and 11.0.0.4 - Sayyadina (revision 4124)
I just get a message saying the "version of the Server you are trying to connect to is not supported"

User avatar
raulfg3
Site Admin
Site Admin
Posts: 4921
Joined: 22 Jun 2012 22:13
Location: Madrid (ESPAÑA)
Contact:
Status: Offline

Re: OS X El Capitan AFP shares to NAS4Free no longer have ACLs

#3

Post by raulfg3 » 30 Mar 2017 12:40

12.0.0.4 (revision 6766)+OBI on SUPERMICRO X8SIL-F 8GB of ECC RAM, 12x3TB disk in 3 vdev in RaidZ1 = 32TB Raw size only 22TB usable

Wiki
Last changes

newyork10023
NewUser
NewUser
Posts: 7
Joined: 16 Jan 2016 07:41
Status: Offline

Re: OS X El Capitan AFP shares to NAS4Free no longer have ACLs

#4

Post by newyork10023 » 30 Mar 2017 17:36

Update: The issue did not exist with NAS4Free 10.3.0.3.2898 (works) but does exist with NAS4Free 10.3.0.3.2987 (broke). I was in the midst of narrowing down the culprit version when my secondary test NAS4Free box failed to boot (rootfs not found). I have not (yet) tested 2942 and 2964. These are the only other NAS4Free images that I have (and I no longer can find older images on SourceForge to determine if other versions exist in this range).
Will continue research if needed when I have a working test machine. I hope, and expect, that with the narrow range of NAS4Free images, the code change that broke NAS4Free's integration with Open Directory can be determined.

The issue prevents users from modifying files-- new files can be saved, but existing files cannot be modified.

newyork10023
NewUser
NewUser
Posts: 7
Joined: 16 Jan 2016 07:41
Status: Offline

Re: OS X El Capitan AFP shares to NAS4Free no longer have ACLs

#5

Post by newyork10023 » 30 Mar 2017 17:40

That particular message is indicative of Mac's unable to find a mutual cipher suite to connect to the server. I haven't yet tested NAS4Free v11. I don't believe NAS4Free requires enabling weak encryption on the Mac clients. It may require adjusting for mutual compatibility of ciphers. If you want some advice, I can post my configs and try to find a link on the ciphers for AFP connections.
raulfg3 wrote:
30 Mar 2017 12:40
see: viewtopic.php?p=76910#p76910

Post Reply

Return to “AFP”