Help with Permissions 10.4.11

Question

Permissions on my OD server are not working correctly, I have a volume shared through WGM.
Owner = hmistaff / R&W Group = hmistaff / R&W and Everyone / R&W.
The share has posix permissions and ACL's on. If I propagate the permissions down, it looks ok, but a local client creates a folder on the share, the group says they only have read only access.
Each user is bound to open dir, and a member of the hmistaff group.
Server is OSX 10.4.11 and clients are a mix of 10.4.11 and 10.3.9.
it doesn't make a difference where the files are created it does the same thing on every workstation.
heres a bit of log info
Nov 29 19:53:57 localhost slapd[60]: bdbdbinit: Initializing BDB database\n
Nov 29 19:54:00 localhost slapd[60]: slapd starting\n
Dec 12 12:21:41 OSXServer1 slapd[60]: Entry (uid=untitled_2,cn=users,dc=OSXServer1,dc=local): object class 'posixAccount' requires attribute 'homeDirectory'\n
Dec 12 12:21:41 OSXServer1 slapd[60]: entry failed schema check: object class 'posixAccount' requires attribute 'homeDirectory'\n
Dec 12 12:22:04 OSXServer1 slapd[60]: Entry (uid=hmistaff,cn=users,dc=OSXServer1,dc=local): object class 'posixAccount' requires attribute 'homeDirectory'\n
Dec 12 12:22:04 OSXServer1 slapd[60]: entry failed schema check: object class 'posixAccount' requires attribute 'homeDirectory'\n
Dec 12 12:51:47 OSXServer1 slapd[60]: Entry (uid=untitled_2,cn=users,dc=OSXServer1,dc=local): object class 'posixAccount' requires attribute 'homeDirectory'\n
Dec 12 12:51:47 OSXServer1 slapd[60]: entry failed schema check: object class 'posixAccount' requires attribute 'homeDirectory'\n
Dec 12 12:52:34 OSXServer1 slapd[60]: Entry (uid=bzaccari1,cn=users,dc=OSXServer1,dc=local): object class 'posixAccount' requires attribute 'homeDirectory'\n
Dec 12 12:52:34 OSXServer1 slapd[60]: entry failed schema check: object class 'posixAccount' requires attribute 'homeDirectory'\n

Answer 1

Hi
When enabling ACLs on a volume you should always restart. Strictly speaking this is true for the boot volume but it is good practice to restart if ACLs are enabled for any volume. On successful log in double check your permissions again and make sure the POSIX options are grayed out in the Protocols tab. If I was you I would stick with either one or the other Permissions models available else things can soon get messy. I would re-assign the POSIX permissions to be Owner: root R/W (or admin), Group: admin Read Only and Everyone: Read Only. Use the ACLs window to fire off desired permissions. Setting the POSIX permissions in this way means its easier to troubleshoot later on.
Gerrit de Witt has made available a fine series of informative articles that explain the permissions models available on OSX Server. In my view these are essential reading and go far beyond Apple’s Admin Manual. This is the link:
http://discussions.apple.com/thread.jspa?messageID=1535247
Hope this helps, Tony