File sharing too permissive!

A somewhat alarming problem: I shared my movies and music folders over the local network so my roomate can access my files setting the permissions to "Read Only". He can do whatever he wants: rename or delete them and it's definitely a permission problem on my Mac.
I've tested with "No Access", it works as said, he cannot access the folder, disabling SMB does the same, but "Read Only" lets him modify and delete my files and that's a big problem in my book.
It seems Mac doesn't know how to handle the rights correctly. He's using the latest Ubuntu 10.04 and sharing is done over Samba.
My files aren't on the same partition as the system, I have a Mac partition for the system stuff and a Data partition for my files and Disk Utility doesn't let me repair the permissions on my Data partition.

The Shared folder is the only folder a user can access via the Guest account. You've apparently given wider access than that hence your issue.
Is there a reason you're using SMB? Are these other users accessing from Windows machines that cannot access your machine otherwise?
Seems to me that given what you've stated you should simply move the files you want users to access into the /Users/Shared/ folder. Have them only access via the Guest account but not as registered users but simply as guest users. Then they cannot access any of the rest of the machine. A registered user logging in with your username and password essentially has the same access to the machine as you do. The guest user on the other hand only logs in as a guest user which gives them access only to the Shared folder. You need not specifically share anything on the machine as access to the Share folder is automatic.

Similar Messages

File sharing too slow

Hi,
I have 2 macs connected via hub. My internet connection is very fast and everything is ok but file sharing is too slow. 1GB takes 8 hours to be transfered.
Any fix?
Thanks!

yup same here, 9 gb file shared via airport extreme from my Macpro 8proc to my 17" Macbook Pro was going to take 4 hrs?????? doing it via firewire now, 10 minutes.
is there a network setting in missing as both machines obviously have 902.11N and the extreme is setup for N (B/G compatible)??
jas

Leopard - File sharing too much?

I've got Leopard setup with file sharing over SMB. Right now, the only folder I have shared under 'File Sharing' in the system prefs is my Home directory, and that's only shared to a single account.
Yet, from my windows machine, I see every signal drive being shared including "Macintosh HD" and my various external drives. I checked and I have read/write access on all of them.
Why are all these extra volumes being shared? And any idea how to stop that?
Thanks

Same issue...just happened a few days ago and racking my brain on why. Found this post:
http://discussions.apple.com/thread.jspa?threadID=1247712&tstart=0
Think the key is this: com.apple:show admin all volumes = yes (I have not played with this yet but did create a standard account to test the non-admin user)
I created another user account with standard permissions (don't check the admin box when you create it). Set that up with File Sharing. When I did this, only the user's home folder was shown. but, on my regular account (with an admin status), I get the root level of the hard drive.
This WAS working correctly with my admin account and only showing my home and folders within that. I either changed something or the daemons got restarted...maybe I was a standard user initially and changed that to admin (don't think so). Per the other thread, it shows why a reboot could cause this (/var/run/smb.conf regen when the daemons restart). Btw, this is a virgin 10.5 install on a new mac.
I am trying to figure out why it was working correctly but is not now. The way I read it though, admin users are suppose to get all volume access by default. If it is a feature/bug, you change the smb.conf file per the above or create a standard account for sharing files. Still digging...

Power book G4 Leopard 10.5.8. File sharing preference checked but not working after start up until unchecked and the rechecked?

I hope the title is enough info, please ask. In the mean time I have created an applescript to open preferences/ sharing and uncheck then check the file sharing box. This works but I would obviously prefer it just work normally. I have no corrupt preference files. Perhaps a file is missing? Thank you.

Greetings Kwnez
I'm not up to your level of expertise yet. I'm networking and file sharing too, on my Mac Powerbook 1.33 GHz PowerPC G4; OS 10.5.8 Lepoard. At the public library I found by asking the clerk a book Authored by David Pogue. "Mac OS X Leopard the Missing Manual". It (the book) has helped me ask better questions. I'm not saying that your question "
Power book G4 Leopard 10.5.8. File sharing preference checked but not working after start up until unchecked and the rechecked?
is hard for me to understand, I went to system preferences and looked at the sharing box. when I clik it it opens up and the first thing I see is my computers name, and under that i see, " Computers on your local network can access your computer at: ...-powerbook-g4-15.local"
What I'm saying is "Are we on the same Page"

Lock Screen feature is interrupting downloads and file sharing

When ever i leave the Macbook pro (non retina) for file download and update, the Lock Screen feature stops the downloads. And it stops the file sharing too.
i can't share or sync files while screen lock is active. How i can configure the lock screen to not disrupt my download and or file sharing?

To verify if the issue is directly related to your Powerline adapters, please try connecting an Ethernet cable between the two routers. Of course, if the distance is too great to do this practically, bring the AirPort Express back to the location of the TC. If the issue is resolved, I would double-check your Powerline configuration. Remember these have to be installed so that they are on the same electrical ciruit. That each outlet that you connect one of these two must lead back to the same circuit breaker at the main electrical box. These adapters cannot "jump" circuits.

Problem importing videos into file-shared library

There appears to be a bug in iPhoto for importing videos in the case where a library is opened via file sharing.
I've posted a bug report with Apple but it might help others to know about this. If I'm mistaken feel free to explain, that would be helpful too.
I have an iPhoto library on a Mac Mini server at home. I often open the iPhoto library on the mini via file sharing from my laptop to edit it.
I can drag and drop photos from my Sony DSC-H55 memory card plugged into my laptop onto iPhoto and they import fine into the file-shared library.
If I do the same with videos I get an error message that they are an unsupported file type.
If I copy the videos to the mini, and open iPhoto locally on the mini, they import fine.
In every other way, working with this iPhoto library via file sharing has been flawless, so this looks like a bug.

Interesting, thanks for the warning, Terence. I guess I assumed error correction would deal with that scenario, but I suppose there are insidious errors that could slip through and result in a mangled library. I do regular backups but still, I might lose that one special priceless photo!
It's easy enough to use screen sharing to operate iPhoto on the mini over wireless. I can transfer files first and then import that way. That would avoid this bug too.
Would you say this applies to other aspects of file sharing too? In other words, should we simply never edit a crucial file on a remote machine connected by wireless?
Where I work we often use SVN over wireless. I wonder if we could damage something while updating the repository.

After upgrade to maverick - file sharing ask for permission to open files

after updating to maverick. my files i share with my office pc. can't open the document & ask for permission from the computer or administrator for asstiance. very time i have open up info and push "apply to enclosed items". for to get these to open and work. worked fine before maverick. seems its not to keepping the sharing and permission info. need help! plus I have tryed to use it in drop box ,plus in other folders but they all seem to be doing the same thing. Or do I have to go back to mountain lion or lion?

Follow these instructions to uninstall MacKeeper. They have been tested with the most recent version of MacKeeper (v 2.8). Earlier versions than the one released in 2012 require more extensive work to uninstall all its components.
The effects of having actually used MacKeeper to do anything are a completely different matter. The fastest way to take an exquisitely designed and painstakingly engineered Mac and make it run like a steaming pile of dung is to install and use such ill-conceived "cleaning" or "security" products. This is just one example of a broad category of time- and money-wasters capable of causing damage that can only be rectified by reinstalling OS X, restoring from a backup, or completely erasing your system and rebuilding it from the ground up. Never install such junk on a Mac.
If you used MacKeeper to encrypt any files or folders, use MacKeeper to un-encrypt them first.
Quit the MacKeeper app if it is running.
Open your Applications folder: Using the Finder's Go menu, select Applications.
Drag the MacKeeper icon from your Applications folder (not the Dock) to the Trash.
You will be asked to authenticate (twice):
You do not need to provide a reason for uninstalling it:
Just click the Uninstall MacKeeper button. You will be asked to authenticate again.
After it uninstalls you may empty the Trash and restart your Mac. All that will remain is an inert log file that does nothing but occupy space on your hard disk.

Domain users files sharing permission problem

Dear Domain Professional,
We have a three domain controllers 192.168.92 .162,167,150 All domain controller working with
Global Catalog servers ( Root forest ) . All domain controller live synchronize with each others like Users , Group policy , ADS, DNS.
lastnight we had a problem with file sharing permission . it had been asked username & password . why this problem was happened ?
Finally we had restated with all domain controller then file sharing perfectly working fine .i had verified all events in domain controller there is no any error issue .
Note:- we are using juniper firewall is there any security issue ?
happended
Regards
Subash

Hi,
According to the
repadmin results, there isn’t any replication issue.
I was wondering how long did the issue last until reboots of DCs?
If the period is short, then this behavior is normal, because AD replication takes time, this issue could occur before AD replication has completed.
Another possible cause is related to Kerberos authentication and authorization mechanism.
During a logon session, once a user has been authenticated successfully, it gets an
access token containing its SID and group membership and privileges.
The user's access token is subsequently inherited by any application process that the user starts during the logon session.
If we change user’s group membership and privileges
after the access token has been issued, the changes won’t be updated until this user logs off and logs on again.
Here are some related articles below for your references:
How Access Tokens Work
http://technet.microsoft.com/en-us/library/cc783557(v=WS.10).aspx
How the Kerberos Version 5 Authentication Protocol Works
http://technet.microsoft.com/en-us/library/cc772815(v=ws.10).aspx
I hope this helps.
Amy

Mac OS X Server, File Sharing, Permission

Hi All,
          I’m trying to use Mac os X server Maverick in a small team within my
          organization. I was able to successfully install and setup the server, which
          resides in a local network. I did the following setup:
     1 ) Open Directory Setup
      2 ) File Sharing , /Users , available for home directory over AFP
      3 ) Created Network users with home folder pointing to /Users
      4 ) Bound Clients to the server
      5 ) XCode Server Setup with git repository
      Users now can login using their own account and their home folder
      is loaded from the server. Unfortunately there are issues. Clients are having permission issues,
      which we have never encountered on local machines before we switched to using XCode Server.
      Here is a list of some of the issues so far
      Xcode issues on client computer:
           a)   When creating a XCode project, it reports the error “Couldn’t not find build module Drawin” when clicking create
             button.I found online a workaround fix that supposedly works, which is to set "Enable Modules (C and Objective C)"
              to No. But we didn’t have to do this before using XCode server.
           b ) When committing to git repo , the following error happens “fatal: Repository has been updated ,
                but unable to write to new_index. Check the disk is not full or quota is not exceeded ,
                and then "git reset HEAD"   to recover” Another work around we found online is to do on the client,
               cp index backup ; mv backup index
       We don’t want to have to do this every time we create a project, what could be wrong with the setup?

You need to run Server Admin and click on the File Sharing icon at the top. Then click on Share Points, and Browse. You then browse to the folder you want to set the permissions on.
You will see in the bottom half of the window the current permissions. While in theory you can use just POSIX permissions, Snow Leopard prefers using ACL permissions. So as an example to set a folder to be only accessible by members of a specific group and to deny access to everyone else you would do the following.
Click on the + symbol at the bottom
A window will open listing all your users and groups, click on groups at the top
Find the special 'Everyone' group and drag it to the ACL section
Find the group you want to give access to and also drag that to the ACL section but make sure it is above the Everyone group as higher setting override lower settings
Set the Everyone group to Deny Read permission, this will prevent them being able to access this folder
Set the group you do want to have access to Allow Read or Allow Read/Write, the first would let them only be able to read, the second also allows them to create files or modify files.
Now click on the Save button in the bottom right.
You might also want to click on the gear wheel symbol and choose 'Propagate permissions' if you want to apply these permissions to all the files and folders within this folder.

Permission error over afs (Apple Personal file sharing)

Hello, I am trying to share my powerbook's external harddisk to my MBP.
Both system are running OSX 10.4.8, and the system files of MBP are directly migrated from My PB. Therefore, I am using the same user account on both machine.
The personal file sharing sharing preference are started on both machine. I am able to see and connect to the other computer over finder, and authenticate with the my own user name. I can mount that external hard drive but I do not have permission to modify it over network.
I have changed all the files' permission (from the root directory and apply to enclosed items), not working. I even checked the "ignore permission" of the external volume, still not working.
I tried to used sharpoints, but it is still the same thing.
Do you guys have any idea?
thanks!

found out it's because i changed my shortuser name from another account, so the user id is 502, which caused the conflict.

File sharing permission problem

i have two machines, an iMac and MacBook Pro both running 10.5.6, and am trying to access (via standard file sharing) files residing on the iMac from the MBP. i log in with correct credentials. when i do a Get Info for the file resident on the iMac from the MBP, the file's permissions are incorrect. in fact, if i perform this same operation several times, i get different results, even though the source file is not being touched. the actual perms are rw-rw-r-- with group "media". the displayed perms are always rw-r--r--; the group name is sometimes "staff", sometimes "media".
i'm simply trying to copy files to the MBP from the iMac, wanting to retain permissions. they are always getting messed up.
anyone had any luck in simply copying files from one machine to another and retaining permissions?

on further investigation, perms are just wrong. sometimes the user is incorrect. if i add extended perms (via ACLs), they just don't appear at all.
is this just a bad leopard bug?

File sharing reports too many users connected

SPECS: Mac Mini Core 2 Duo 2 GHz, 2G RAM, Mac OS X 10.6.4. Other users in office also running similar hardware and Mac OS X 10.6.4.
CLARIFICATION: This Mini is used as a file server in a small law office (4 other workstations). It is running Mac OS X Client, not Server. I refer to the machine as "the server" but wanted to be clear the operating system is the same on all stations.
HISTORY & CONFIG: This system was setup in November 2009. It provides simple file sharing storage for a 4-user law office and runs Retrospect (version 8.1.626) to do some local and network backup operations. At the time it was setup, it was also running Now Up-to-Date Server but that program is no longer supported, and it has been removed from the computer (May 31, 2010). In late March 2010, I installed Daylite Server as a replacement for Now Up-to-Date. All stations are running Mac OS X 10.6.4, and have always been at the most recent Mac OS X 10.6.x revision within a few days of the release of a major update.
PROBLEM: Occasionally, clients cannot connect to the server (and I don't have the exact error message -- next time it happens, someone is supposed to get a screenshot). When this happens, if you go to the server and open the file sharing control panel, then click "options", you will see an impossible number of people are connected. The first time this happened was on April 28, 2010, when it reported 41 users were connected. Mac OS X Client has an upper limit of 10 simultaneous user connections, so you can see this number is not possible. Additionally, these are "phantom" logins because you can execute this command in Terminal to see the IP addresses of any connected users:
netstat -n | grep '.548'
And when I do this, unless there was someone who had logged in prior to the "phantom explosion", it never shows any connections. On two occasions, I've actually been in the office late one night to do maintenance, checked the server before I left and found 0 connected users, then got a call in the morning that the first person who attempted to connect was blocked and the server showed 10 or more users connected.
I do not believe this is some kind of security breach. The server is not Internet-accessible, and as is shown by the netstat command, there really isn't anyone logged in anyway. I consulted with Marketcircle (makers of Daylite) because it seemed very coincidental that I installed their software just prior to the beginning of this problem, but they claim Daylite does not make any use of the Mac file sharing system. But, again, since these aren't real users, I suppose it's possible a bug in their software is somehow upping the Mac's connected user count erroneously?
Restarting the server always fixes the problem -- until it happens again. This Mac Mini is a pretty simple station -- just runs Daylite Server and Retrospect Single Server, plus the basic file sharing. Anyone have any ideas why this keeps happening?

I would say odds are likely this is correct. On at least two occasions I can think of where I verified everything was okay and later discovered a "phantom explosion", a Retrospect backup would have run. Our backups typically run at 3 AM. Is this a known issue with Retrospect? If so... not sure why it doesn't happen all the time. And in my own office I have a pretty similar setup on an entirely different computer that multiple people connect to, and it never does this. Color me confused.

File sharing is too automatic

I have two computers on my home LAN. One is an older iMac (let's call it Homer) and the other is a newer MacBook (let's call it Bart).
Bart is connected wirelessly to my wireless router. Homer is connected via Ethernet to the same router.
I have enabled file sharing and FTP access on both computers. On Homer, I have also enabled Printer Sharing, because I have a printer connected.
When working on Bart, I can Go:Network from the Finder, and a window opens, where I can see a shortcut for Homer. If I click Homer and Connect, I see a "Connect to Server" dialog. I can connect as "Guest" or "Registered User". The username and password for my main account on Homer is already filled in, along with the "Remember password in keychain" checkbox. I click Connect. This opens a dialog that allows me to select the mounted volume "Homer HD" or my username. If I click "Homer HD", I can see the top folder on the hard drive, run applications that exist only on Homer, and search public folders. This is all the way I want it.
When working on Homer, if I Go:Network, I see a shortcut for Bart. If I click Bart and Connect, my main user directory on Bart opens up immediately without any dialogs, and I can't see anything above Bart, such as Bart's Applications folder or public folders.
Can anybody help me figure out what is wrong, why my connection is bypassing the choices I want, and fix it so I can access everything when working from Homer?
Thanks

I've done a little digging, and here's what I found out so far.
I can open Safari, and type the afp://xxx.xxx.xxx.xxx where the x's are the IP of of the macbook on the LAN. When I do this, I get a connection as I desired. I can mount any disk connected to the laptop, or mount my home directory. If I attempt to connect using the icon that shows in the Finder, it attempts to connect by FTP, which is not what I want.
However, from the macbook to the iMac, double-clicking the icon opens an afp connection to the iMac.
So now that I understand what's happening a little better, I can refine the question. How do I set up my iMac so that I open an afp connection rather than a ftp connection when I open the icon representing the macbook in the finder.

Help! Trying to access a share disk with file sharing- problems

I have limited knowledge of file sharing, keychain access, and Macs in general.
My school uses the Mac OS 9's for our schoolwide "Accerated Reader" program (a common program for schools accross the US).
I am unable to get the 4th grade class room's Mac computer to access the share disk "AR Folder," which means that the Accerated Reader program won't work in this particular classroom.
I go to "Keychain Access." The infor I get for "kind" is "Apple Share password." I go to "Unlock Keychain: AR Computer," and I type in the correct password. I click "unlock". The next window shows "Keychain: "AR COMPUTER" on disk "MACINTOSH HD" 2 items. My choices are "AR Main Lab" and "AR Main Server." When I click on both (one at a time), and on the next window, when I click "go there" the following error message appears:
:An error has occurred. Unable to go to this item's location. An operating system (-5016) occurred."
What can I do from here on? WHat could be wrong? Help me troubleshoot!
Thanks!

Hello sylves,
First..many people may be hesitant to help answer your posts as it deals with a school and security issues and passwords. It is not too good to mispell "accelerated". This could indicate someone trying to get into an area they don't have permission to access.
I offer sevreal ideas.
1. Perhaps you could explain your position in school.
2. - Ask the tech people at school for assistance. I know this can be had at times. I work in a school with all PC's and only a few Macs so they are not quite up to fixing our mac problems.
3. - post more info as to if these computers are able to use internet or are they just going to the school server etc.
I post this as ideas how to get more help and not disrespectfully.....Jim

Has anyone with Windows successfully set up "Accounts" disk file sharing?

I bought an Airport Extreme basestation (the one with Wifi-N and gigabit ethernet)a few days ago and set it up on the network.
So far the wifi part has been nice - the range and speed (and stability) are a lot better than the Belkin draft-N wifi I had been using.
I've also been able to share a few FAT-32 USB disks (Iomega brand) using the "with device password" option and it seems to work nicely in this mode.
But what I really want to do is setup access by the "with a disk password" and via "accounts" - but after several hours of troubleshooting and checking on the Internet, I get the impression that neither work.
For example, when I am sharing the disks in Device mode, I can connect to the IP from windows explorer and access using any user name and the device password. This works great.
When I set it to "Disk" mode - it doesn't work at all - no matter what user name and password are used. I tried using both the disk and device password. I get a windows error "... is not accessible. You might not have permission to use this network resource..." which is consistent with the user and password authentication failure. I have the same experience when setting the disk sharing for "Account" mode.
Repeated rebooting of the Airport Extreme and Laptop did not help at all. I also tried after killing the Airport utility/assistant that sits in the task bar as it seems useless. The results are the same with the utility activated or not.
A few more details:
I have the Airport Extreme in 'bridge' mode - the IP is generated by a broadband router connected to a cable modem. I updated the firmware from the 7.2.1 that came installed to the latest (7.3.2).
I read on the Internet a number of posts from both Mac and Windows users reporting bugs in the security software on the airport for filesharing. So my question is - has anyone with a Windows (XP, vista, etc) gotten the file sharing to work with anything other than Device mode? Eg. Disk mode, Account mode, etc?
I know several people that use these devices, but nobody is using in this mode. I talked 2 friends to try setting up users and they couldn't get it to work either. But it's not a big deal to them since they don't use that feature.
If anyone is using it like this, I'd like to know how you set it up. If you had this problem and what you did to fix it. Thanks!

I suspect I may never know why, but now, inexplicably, everything is working.
Out of curiosity, I tried to connect via an older win2000 machine that we use for a file server and it worked!
After we rebooted the other XP machines, they started working too.
I'm sure the fix was anything but connecting a win2000 machine, but I'm just happy it works now!

File sharing too permissive!

Similar Messages

Maybe you are looking for