Clean up messy permissions?

I'm on 10.6.1 server and have setup 10 shares which are used by 40 users. I've changed permissions to accommodate appropriate access - that works fine. What I'm seeing are remnants of previous settings - old folders that have been deleted, users able to see (but not access) other user's folders for which they have no access or viewing privileges. It seems like it needs a cleanup to purge the residue from the setup process but I have no idea how to do that.
Got any general cleaning tips?
thanks

The easiest way to clean up the permissions is to use chmod.
Unlock any locked files with chflags...
sudo chflags -R nouchg /path/to/folder
Strip away all ACLs like this...
sudo chmod -R -N /path/to/folder
Then reapply the correct ACLs with either Server Admin or chmod. Be sure to apply the permissions with propagation (recursively) in either case. For example...
sudo chmod -R +ai "group:<group name> allow readattr,readextattr,readsecurity,read,execute,list,search,writeattr,writeextat tr,delete,write,append,deletechild,add_file,add_subdirectory,file_inherit,directoryinherit" /path/to/folder

Similar Messages

Cleaning up ACL/Permissions

Hi, in working on an Advanced Leopard server that someone had setup... I'm seeing ACL permissions listed for system level directories and files. To my knowledge, they shouldn't be there, is this a correct, in a normal install ACL's are not in use here?
In any case, with all the overalpping individual users based ACL's used in the general data files, I'd like to cclear them all out, if advisable, and start with some new one's based on gorups.
Can someone advise as to the best way to clean things up, without harming file access? - Lewis

Hi again.
When setting/deleting acls via the commandline the changes will be reflected in the GUI as it is calling the same underlying tool. You could test this yourself by setting some acls on a test file in the GUI and then listing the acls via the ls -le command in the terminal then run the chmod -N command and repeat the ls -le command.
If you do this with the sharing 'browse' pane of Server Admin open in the background you will see the changes as they happen.
A couple of interesting articles on the subject here and here
Cheers

Messages/Jabber: Clean up messy Buddy Lists and start over

Basics
Running Mac OS X Server 10.8.2
Messages (Jabber) turned On
We are not chatting with anyone outside our Jabber server
Problem
Over time duplicate users have shown up on clients buddy lists
Some users display as "Not authoirzed"
Some client's Buddy Lists show old users that have since been removed
Questions
How do I wiipe all Buddy Lists clean? (I am okay with deleting database and starting over if it doesn't affect anything outside of Messages)
I have checked "Make group members Messages buddies" in the group that I want to auto-populate for everyone after I clear all the Buddy Lists. How do I make this happen after I clear everyone's Buddy Lists?
Any help would be greatly appreciated.
Thank you very much

Basics
Running Mac OS X Server 10.8.2
Messages (Jabber) turned On
We are not chatting with anyone outside our Jabber server
Problem
Over time duplicate users have shown up on clients buddy lists
Some users display as "Not authoirzed"
Some client's Buddy Lists show old users that have since been removed
Questions
How do I wiipe all Buddy Lists clean? (I am okay with deleting database and starting over if it doesn't affect anything outside of Messages)
I have checked "Make group members Messages buddies" in the group that I want to auto-populate for everyone after I clear all the Buddy Lists. How do I make this happen after I clear everyone's Buddy Lists?
Any help would be greatly appreciated.
Thank you very much

Messy permissions on afp

Hi there, this may be basic but for now it gives me a headache. A few months back I upgraded my server to 10.5.8 Server but since then I have an issue with permissions of files placed on the fileserver. In ServerAdmin I have set the permissions to owner > admin (r+w) and staff (r+w). On 10.3 Server there were hardly any problems but now new files copied to the server have the client as owner and staff set to read only. I want the admin to be the owner again and staff set to r+w. How can I fix this? I have 10.5.8, 10.6.8 and 10.7.4 clients. TIA.

Ah found it. Some ACL settings were missing. Thanks everyone!

Odd file move behavior

On my startup disk, I have a movie file (.mov) and a folder I want to collect movies in. Straightforward enough.
So I click/drag the .mov file onto the folder. It shows me the green + icon, and when I let go, it COPIES the file into the folder, not by simply MOVING the file from the disktop to the folder. Wha?
When I grab that same file in the folder and move it to the disktop, it works as expected, insisting that it must be DUPLICATED, replacing the disktop, original file.
OK. So instead of doing that, I decide to trash the original file, then move the version out of the folder and back to the disktop.
In order to do that, I use the contextual menu that drops down with Control+mouse click. It now asks me for my administrator password to do the trash move. (???)
Once the original has been tossed, the file will now move from folder to disktop and back to folder with complete impunity. But if I try this with another .mov file, the process starts all over again.
No extra key combo during the original move gets rid of the + icon.
Permissions were repaired. No change.
Log off was cycled, no change.
Obviously somehow this disk has picked up wierdness when Leopard replaced well-tempered Tiger on it, but where is the checkbox that dumps this odd behavior?
No Right-click on the mighty mouse will bring down the contextual menu at all.

Yea! The Mac is back on track!
It took extra innings and a visit to 1 800 APL CARE to get to the bottom of it, but this therapy should be on everyone's A-list: The Install disk's version of Disk Utility is significantly different from any version you can install on your hard drives. Or so it would appear.
Where the Disk Utility can be there for you on two different hard drives connected to the same computer, running it from different drives is not at all the same - in visible results - as running it directly from the OS X Install Disk.
You can have several disks with OS X on them and run Disk Utility on your main startup disk from those, but they won't find all the messy permissions that are gumming up your system.
It took yet another previous back up Restore cycle, an extra clean install, followed immediately by an Install Disk run of Disk Utility's First Aid/Repair Disk Permissions to clear the cobwebs. Frequent re-weedings (after any program installs or upgrades from anybody, including Apple's own) finds more things to fix. Not always, but frequently.
The Install Disk's Disk Utility--it's not just for breakfast any more.

FireWire no longer works after 10.4.8 update

I used the Software update (after repairing disk permissions) and without any USB/FireWire units connected to my PowerBook G4 17". The update seemed to work fine until I connected my LaCie FireWire disks. The disks powers up, but they won't mount in Finder and they can't be found in Disk Utility. None of the FireWire connections (400 & 800) can be used for any of my disks, nor for my iSight camara.
I have cleaned caches, repaired permissions and updated with the combo updater, but so far with no luck.
Any suggestions?
PBG4 17" Mac OS X (10.4.8)

Hello
Try disconnecting all external peripherals, then shutdown your Mac, pull out all power cord, if it is a portable, take out the battery and leave it as it is for at least 5 minutes... 15 mins best.
Then power back your mac and see if the FW ports are working
Cheers

IMac takes forever to fully boot -- how to fix? PLS HELP!

On my iMac, I often have to wait like 30 seconds to like 1.5 minutes between the time I press the power button and when I can start doing stuff. (I remember it used to be like 20 seconds always.) Usually I can't click on anything and the dock doesn't respond to mouse-overs while the toolbar on top takes its time to load up the spotlight, time, localization, and airport icons. (I don't use Airport btw, that's just for me to enable it if the Ethernet is unavailable.)
I think the problem started not too long after I had first gotten the iMac (maybe a couple or a few months?). This is something I've come to expect with Windows, but not with Mac.
At first I just tolerated the issue, but then I finally tried to solve the issue. I uninstalled VM software like Parallels and VMware Fusion, and I even uninstalled Office 2008 (and I think Adobe Design Premium CS3 also), with no luck. I tried going by suggestions from tech support: I ensured that there were no unnecessary startup items or services, that the desktop was clean, that disk permissions were fine, and that the problem wasn't specific to my login account. I even reset the PRAM. Nothing really solved the issue.
What can I do? If I re-install Tiger will that solve the issue? If I upgrade to Leopard will that solve the issue? If I upgrade to 2GB RAM will that solve the issue? And if I do install Leopard or re-install Tiger, will I still have all my software and files safe?

Check to see if you have any startup items you don't really need - these can cause a delay as to large numbers of fonts.
Other things which hamper performance include:
A very cluttered desktop. Store your work in progress and finished work in sub-folders inside the user > documents folder - as simple as this sounds it is a great resource saver
Backup regularly. Work that you do not touch more that once a year should be backed up to CD, DVD or an external hard disk. It is pointless and expensive to keep this sort of work on your working volume if you access it infrequently. If your startup disk is ±75% full this will have serious consequences on the performance of your Mac.
Make sure you have enough RAM. RAM is presently cheap so its worth considering.
Carry out a “repair permissions” - it is a good idea to do this once a month. You can find an article on how to do this in my tips archive (see link below).
Using “Cron” Scripts helps keep your Mac healthy by deleting cumbersome log files. Applications such as Onyx, Mac Janitor or MainMenu do this for you at the click of a button.
Do not, repeat not, use Internet Explorer. This ancient browser has not been updated for years and will cause you no end of grief. Use Safari, Firefox, Opera or one of the other browsers available for Mac.

10.6.8- since update both Macpro and Mac Air very sluggish. How do i fix?

Both computers are sluggish- so I have to assume it was something with the update which I did at the same time.
Web pages take very long to open and apps hang on launch.
Anyone else?
I tried Snow leopard cleaner and repair permissions.

web pages
Try turning off the router for 5 minutes, shut down the Macs, turn the router back on, restart the Macs.
For your apps...
Try starting up in Safe Mode on both Macs. A Safe Mode boot takes longer then a normal boot. After you are in Safe Mode click the Apple menu icon top left in the screen then click: Restart.
Mac OS X: Starting up in Safe Mode

CS5 won't open in 10.9.3

help- have installed and re-installed CS5 in my 2012 laptop (updated to mavericks- latest java, latests adobe updates, latest mac updates. neither photshop nor bridge will open and can't find any online help that has worked so far!

If you updated the OS after Photoshop 5.x was installed, the nefarious Yosemite disjointed beast damaged your Photoshop installation. Thank Apple for that.
You need to UNinstall Photoshop again, look for, download and run the Adobe CS Cleaner Tool, Repair Permissions with Apple's Disk Utility, install Photoshop from scratch again, apply any and all available Photoshop updates, and ONCE AGAIN Repair Permissions with Apple's Disk Utility—in that precise order.

E-mail addresses in Apple Mail not showing up in Apple Contacts (iCloud All Contacts)

I've been going though my contacts in the Apple Contacts app, which I have set up to use iCloud, deleting old contacts and cleaning up messy ones. And I've noticed there are a lot of e-mail addresses that I have in Apple Mail - I just start to type a few letters in the To: field and they come up - that are nowhere to be seen in the Contacts app.
Shouldn't these be in my Contacts app? Where else would these contacts be stored? And is there a way to sync them into my iCloud All Contacts or do I have to manually track each one down and add it in the Contacts app?
Quick edit to add: I've also now noticed that the same applies on my iPhone. E-mail addresses appear in iOS Mail that are not in my iOS Contacts app (I've performed a search to be doubly sure). Where do these contacts live and why are they not in my Contacts apps?
Message was edited by: darcyfitzpatrick

darcyfitzpatrick wrote:
I do have both of those, but only iCloud shows up in my Contacts sidebar, and addresses are being sent there so I guess it's the default. Funny how this stuff is all so murky.
Not murky at all:
And as the On My Mac account does not show then it is empty. (It's visible if it is the default or if it has any content)
I haven't come across your last point, (no email address) so no help there I'm afraid.

Mouse pointer hand lost on links

There are a number of references to this problem (mouse pointer over a link momentarily turns to a hand before becoming the arrow again) all seem to be answered when the problem goes away. I have this problem and I know that if I close Safari and reopen it the problem clears.
For a few days...
For me the problem hasn't been resolved as I'd like to know why its happening in the first place and fix it properly rather than a short term solution.

Hi Redsmartie!
I get this occasionally and though it works yes it's a little weird to have the arrow showing instead of the hand. I don't get it very often so it's no big deal for me. If you get it often I'm not sure what can make it go away really? Possibly a re-install of Safari is your best bet? Or you could try some basic clean up (repair permissions, disk, reset Safari, replace plist) but can't say if that will help much?
Reg

Itunes won't start, new iMac 10.6.6

Extreme frustration. I tried everything, redownload, reinstalled, deleted plists, cleaned caches, repaired permissions (another story in itself, SL 10.6.6 is still beta). When I go to start itunes, it immediately goes to the alert box "quit unexpectedly". Since it's a brand new imac, I get tech support, they couldn't figure it out either. Made a test account and it ran ok, so it appears that the problem is in my home user. I already had to do a reinstall of the system once as the system wouldn't shut down on the original account. Was hoping someone here might be more astute than the SOS appl crew.
thanks

I have the same, after Apple replaced my HD (it was one of those 'will-maybe-crash disks) trouble started... performance went down, programs won't start up... very frustrating, since apple won't give tech support on that my machine is 2 months old...

File dates changed to 01-05-11

The dates of the files on an entire internal hard drive changed to 01-05-11. In addition the metadata dates in the Lightroom files on that dive also changed to 01-05-11. I just plugged my iPhone in to update the files from iTunes which are not on the first drive mentioned and it tells me that the iPhone software is up to date and it will check again on 01-05-11. When I check back in Time Machine the dates on the files appear to be correct but as soon as restore the files they show 01-05-11 as the date modified. The time and date in the system prefs is correct. I have also run Onyx to clean up the permissions.
I've scanned for viruses but come up clean. Any suggestions?

Problem solved - caused by an incorrect date format entered in the system preferences. Once the incorrect format was corrected all dates returned to the proper date.

Applications wont start

its a G3 most of the applications will no longer start, i've tried starting up from a different source from within the OS and from holding down the alt-shift-option-delete at startup but nothing will work. I'd like to scan the drive since i thing it must have errors. Any adive would be appreciated.

Look for: Applications > Utilities > Disk Utility
Open it, select your hard drive and click repair permissions. It will run for about five minutes doing stuff that seems completely inscrutable.
If the problem is not solved, you will need to boot from a System/Install CD, but do not proceed with the install! Instead, choose Disk Utility from the Installer menu. Select your hard drive. Click Repair. If errors, repeat the repair until clean (or stuck). If clean, click Repair Permissions.

Crystal Reports Viewer XI R2 Missing icons on toolbar when displayed

I am using Crystal Reports Viewer XI R2 on Windows 2003 Server and trying to deploy to a different server.
I have deployed a new web site from a development server to production. The crystal reports render correctly, but the only problem is that the icons for the viewer show "X". I have tried the following:
Copy the aspnet_client folder (c:\Inetpub\wwwroot\aspnet_client) and all of itu2019s subfolders to the physical root directory of the custom web site.
If the above does not help, ensure that this is in the web.config of the application:
<httpHandlers>
<add verb="GET" path="CrystalImageHandler.aspx" type="CrystalDecisions.Web.CrystalImageHandler, CrystalDecisions.Web, Version=11.5.3700.0, Culture=neutral, PublicKeyToken=692fbea5521e1304"/>
</httpHandlers>
Still see "X" in the view tool bar.
The w3SVC1 log shows the following:
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /PCS2/WebResource.axd d=fkLVkQwks9cycSbn9MoaTw2&t=633187128429062500 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 200 0 0
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/prevd.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/firstd.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/next.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/grouptree.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/upd.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/last.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/search.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/bologo.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
2008-08
Can anyone help my find my icons?

>
Clif McNeely wrote:
>
> The w3SVC1 log shows the following:
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /PCS2/WebResource.axd d=fkLVkQwks9cycSbn9MoaTw2&t=633187128429062500 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 200 0 0
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/prevd.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/firstd.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/next.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/grouptree.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/upd.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/last.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/search.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
> 2008-08-07 18:35:59 W3SVC1 137.25.173.215 GET /aspnet_client/System_Web/2_0_50727/crystalreportviewers115/images/toolbar/bologo.gif - 80 - 137.25.173.215 Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;SV1;.NETCLR1.1.4322;.NETCLR2.0.50727;InfoPath.2) 401 2 2148074254
> 2008-08
>
> Can anyone help my find my icons?
Your IIS logs show that the web server can't find the toolbar gif files. The first thing I'd do here is browse to this location using your IIS Manager. Find the next.gif file and right click it and select Browse. This will take your application out of the picture and will tell you if you can see this gif file on its own as processed by IIS.
If that doesn't work you likely have a permissions issue. Look at the security on the toolbar directory and see if the ASPNET or Network Service account have rights to read that directory. Also make sure the group IIS_WPG has access here too. You might even want to run the IIS Managers permissions wizard to clean up file permissions here.
Another thing you could try is creating a Virtual Directory that points to the original aspnet_client directory under C:\inetpub\wwwroot.
Hopefully that helps. Good luck!

Clean up messy permissions?

Similar Messages

Maybe you are looking for