Setting permissions in File shares content sources

Hello,
we want to crawl File Shares and set them available to searches. The set up of the crawler and the indexing is not a problem and works just fine.
The problem is that we would like to set the permissions on the results given from this content source and if possible to map the permission already on the files to the result scope. In simple words, only show the results (files) in which the AD User has
at least read privilege.
Is this possible? and if not which would be a solution of setting the permissions to this content source?
Thanx in advance!
Ioannis

That is the default behavior of SharePoint search. It will automatically read and use the file ACL.
One thing to note is that often users can see files but not read them on the file system, in which case they will be able to find the files in the search engine but not open them nor see within the files.

Similar Messages

I have set up a file share but cannot login with my account

Hi everyone. I set up a file share using the settings in OS 10.5, however when I go to login on Windows Vista using my specially created read only account (called: remote). I cannot get it.
I can only get in using these settings:
user name = xxx.xxx.x.xxx\myaccount
password = blah blah blah.
Yet when I apply the same settings changing 'myaccount' to 'remote', I cannot get in.
I'm not sure where I am going wrong, any help would be much appreciated. Thanks!

No need to apologise, I'm the idiot who can't setup a home network. Although I'm sure Vista is at least to blame somehow.
I have sharing turned on and it says "Windows users can access your computer at smb://192.168.x.xxx."
If I click "options" it has a box which has an "on" tick box and my name. I have ticked it. When I ticked it, it asked for my admin password which I supplied.
On the firewall front I have allow all incoming connections.
I am trying to login to 'remote' whilst my Mac is still logged in as me, 'nathan' I have successfully logged in to the mac on the same settings using account: 'nathan' on Vista whilst still in 'nathan' on the mac.
I am trying to connect going into network on vista and selecting my mac, correct.
The connect works with 'nathan' if I go:
192.168.x.xxx\nathan
password
but for some reason the 'remote' user I have set up wont work on vista using the same format.
Thanks.

Error in setting permissions on file/directory $ORACLE_BASE/jre/1.1.8/LICEN

Hi,
On installing Oracle 9.2 on RedHat Linux release 4, I encounterd the
following error:
Error in setting permissions on file/directory
$ORACLE_BASE/jre/1.1.8/LICENSE
This error is encountered at the inital stage of installation after inputing all the
required settings in the OUI. and at the Installing Java Runtinme Environment 1.1.8.1.0
Could someone tell me why it happened and how to fix it? Your help is
much appreciated.
There was a post on this topic only in here and said to change the permissions of the
ORACLE_BASE .......... I have tried out all these and all the permissions and the environment settings are correct but i'm not able to proceed with the installation even after a lot of trying.
All you guys help is verry verry appreciated..........
Thanks,

Do the following and post the results:
cd $ORACLE_BASE
pwd
ls -al
cd jre
pwd
ls -al
cd 1.18
pwd
ls -alI can't imagine anyone making recommendations without seeing what you've done.

Error in setting permissions of file/directory

This is the error I am getting
Error in setting permissions of file/directory /u01/app/oracle/jre/1.1.8/bin/i686/native_threads/.extract_args
I am running RedHat 9 and obviously installing 9.2.0.
Any ideas on why I might be getting this. I have set permissions for the oracle user for this directory.
Thanks
Dave

from root try this command
umask
umask must set at 0022 ... if your server not set at this number use this command
umask 0022

Error in setting permissions of file/directory /home/oracle/jre/1.1.8/LICENSE !

Error in setting permissions of file/directory /home/oracle/jre/1.1.8/LICENSE ! Installation problem of 9i databse on redhat 7.3!!I installed sun jdk 1.3 or jdk 1.1.8_v3 and created a link for /usr/local/java !

from root try this command
umask
umask must set at 0022 ... if your server not set at this number use this command
umask 0022

Unable to see the file share content via UNC path

I have run a cmd command to modify the NTFS permissions on a few home directories.
That command has helped me to remove all from the ACL of shared folders; and add domain admins into it.
I am an admin on that Windows server. Now, whenever I try to access any home directory via UNC path; it doesn't displays the files and folders in it. But, if I go to the server and try to open the particular home directory from there...first it gives me
a prompt that I currently do not have access on folder and then gives me an option to click on continue and then I can access the files and folders within the directory.
I am also able to see the files and folders in the directory via UNC path after doing the above steps.
Can somebody help me understand what I did wrong here and how can this be resolved now?

Sorry, am added into local administratir group. But, NTFS permissions shows that I have only "read" and "change" permissions (I have checked this from effective permissions).
The ACL of folder shows only "Domain Admins" have full access and I am not a part of AD group "Domain Admins". I think this is the root cause of the issue.
I am running below mentioned command to give myself full access on the file shares without making any changes to the current ACL of all shared folders. However, it is not working and not even throwing any error message.
for /f %i in (u:\users.txt) do cacls \\hdfile01\users$\%i /C /G "AMadm":F
users.txt contains 'cn'. Another thing to notice here is that if I just keep one ID in .txt file and then run my command; it is working. But its not running for all users in loop.
Can somebody please help.

Set Permissions for file deletion

I need to create a new temp directory and at the end of my program, I need to delete the temp files...pretty common thing to do. My problem is the permissions dont allow me to delete the files unless I set them first somehow. I want to know what the settings must be in the Set Permission.VI so I can then delete the files. How do I mechanize this?

Are you having this issue in both the Development Environment and the Run Time Environment? The second solution that I linked is for executables only, and only makes it so that you don't have to turn off the UAC because it has administrative privilages. Anything that an administrator is able to do, the executable will now have permission to do. To test if this solution will work at all, just right click on the executable and select "Run as Administrator". If you are still having issues when the executable is running as administrator, the above solution will not work.
Try running this snippet and let me know what happens. All it does is create a file in the temp directory, read its permissions, then deletes the file. This runs on my computer with no error in the Development Environment and has the permissions of binary 110110110 (Decimal 438).

How to set permissions for files created by Windows on OS 10.8 volume

I am in process of upgrading from an iMac with OS 10.6 to an iMac with OS 10.8. In my office network, I store all files on my iMac and let the Windows PCs act as workstations to read/write onto the Mac. (It's simpler to have all files centralized in one location, and only have to be concerned about backing up one volume.)
When I had OS 10.4 and OS 10.6 any newly created file saved by the Windows PCs onto the Mac could be opened by the Mac.
But with OS 10.8, I can not open newly created files from Windows. The file permissions for the newly created files from the Windows PCs are:
PCUser = read/write; Everyone = no access.
What do I need to do so that newly created files from the Windows PC (currently Windows 7) can be opened by the Mac, without having to use Get Info to reset the permissions each time?

You could try adding this Access Control Entry (ACE) to the folders you let them save to:
sudo chmod -R +a "accountinggroup allow delete,chown,list,search,add_file,add_subdirectory,delete_child,file_inherit,directory_inherit" /Path/to/topmost/folder
You first need to create a group for all the sharing people you want to have access to that folder, if you don't already have one. In the example, "accountinggroup" is the group, so change that to whatever you want to use.
The ACE allows them full access to the files in the folders. If you want to limit that, remove the option (such as delete).
You create Groups in Users & Groups System Preference just like creating a new user. Just change the account type to Group.
If you want a GUI to do the settings, try Sandbox. It's got a few glitches in the Interface, but it seems to write the ACL correctly. One glitch is selecting the Group or User. I had just a list of Continuing in the popup menu. I typed in the Group name I wanted and it worked. Some errors pop up as you traverse the file hierarchy, but you can dismiss them.
Here is an old hint, which gives a little background, and some other options: http://hints.macworld.com/article.php?story=20090219133314985
The Server tools would allow you to set this up more easily, but if this is all you need as the server, I don't know if it is worth it.

How do I set up a file share for a workgroup?

THE CHALLENGE
I have two iMacs running OS 10.6.8 and I would like to set up a shared project folder on one of the iMacs for a workgroup of two people. Both users must be able to open and edit any file contained within the shared project folder.
THE PROBLEM
We are unable to collaboratively edit documents. I am able to use the file sharing service in the System Preferences to designate a shared folder on the first iMac and to assign read & write priveledges for our "Design" group of two. However, although both members of the group can read documents in the shared folder and can create new documents in the shared folder, neither member of the group can save edits to documents created by the other member.
How can I create a shared folder that will allow collaborative document editing and avoid these nasty file ownership priviledge issues?
Thanks,
Mark

Is there no one in the community that can respond to this one?
Does the Discussions system have a mechanism in place that ensures an eventual response from a knowledgeable technician, or do some questions simply go unanswered?
I would love to get some definitive guidance.
Mark

Setting permissions on files

I'm currently trying to modify the file, user/library/preferences/SystemConfiguration/com.apple.Boot.plist in order to enable the use of an apple usb external superdrive on my early 2009 iMac-- the internal drive is dying. When I open this file in Get Info, the permissions are, system read & write, admin read only, everyone read only. If I attempt to add owner, nick (Me), with read & write permissions, and then the repair permissions, I get this--
ACL found but not expected on “Library/Preferences/SystemConfiguration/com.apple.Boot.plist”
Repaired “Library/Preferences/SystemConfiguration/com.apple.Boot.plist”
Apparently, it doesn't like having two users with read & write permissions, but system can't be removed from the permissions list.
In terminal, I can make the desire changes to the file, but it has no apparent effect-- i.e., the iMac still won't allow use of the external superdrive. The discs are read for a few seconds, and then ejected.
I'm guessing I have a problem with user permissions, but I have no idea how to fix it. Any suggestions?
thanks,
nick

I've used terminal to change the file, and those changes appear as they are supposed to, but it doesn't have the desired effect, i.e., the computer still won't allow operation of the superdrive. Other people with similar systems and OS are able to make it work.
Does anyone know why on my system, "system" has read & write permissions, but I, as owner, am not even listed in the permissions list for this file? (I haven't checked to see what the case is on other files.) This doesn't seem to be the case for others, where the owner has read & write permissions, and "system" isn't even on the list. It may be irrelevant to why this isn't working, but it's the only thing I can think of at the moment.
BTW, it doesn't seem to matter if I change the permissions or not. It doesn't work any way I do it.

Setting permissions - all files need to be 644/dirs 755 [SOLVED]

I have some files that are in a complex dir tree under:
/media/data
/media/data/project1
/media/data/project1/sub1
/media/data/project1/sub2
/media/data/project1/sub100
/media/data/project2
...etc. etc.
Basically, I need all the dirs to be 755 but all the files to be 644. Obviously I can `chmod -R 755 /media/data` but how can cause all the files to be 644 while retaining the dirs as 755?
Last edited by graysky (2010-02-14 21:34:43)

Allan wrote:chmod 755 $(find /media/data -type d)
chmod 644 $(find /media/data -type f)
find /media/data -type d -exec chmod 755 {} ;\
find /media/data -type f -exec chmod 644 {} ;\
Last edited by SemiBz (2010-02-14 21:13:20)

File Share Search problem with Compress file

I have a content source in SharePoint 2013 search which crawl files from a file share. Some of the files have "Compress contents to save disk" attribute set to true.
These files are being crawled as I can see them in Crawl logs. But when I search for these documents in search center, it only return the documents which don't have compression attribute set. I have even tried searching document title. Any idea?

Hi Rashid,
What keyword did you use for searching the compressed file?
As your description, I set a file as the below:
Then I created a File Share content source pointed to the folder which contains the file, then start a full crawl.
After crawling, I went to my search center, and searched, the result was:
When you search the compressed file, check whether the item title returns a part of the content of the document.
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

SharePoint Search encodes the URL incorrectly when there are special characters in a filename on a file share

In our Sharepoint Server 2013 CA, Search Administration, Content Sources, we have configured a File Share Content Source.
Search queryes works fine and it returns relevant documents from the file share content source.
But when click on a file with a filename that contains special characters like "ÁÝÚÍÓÐ", Sharepoint encodes the link to the file incorect, and when we click on the link to the file, it throws an error on the screen saying "This
page can’t be displayed".
The following picture shows an example on how Sharepoint shows encodes the URL to a file with a special character in the filename:
As you can see, the link to the file is
\\xserver1\felagstest\Kompliserað\Ólavur.pdf, but when I hoover over the file, it translates og encodes this to
\\xserver1\Felagstest\KompliseraÃ°\Ã“lavur.pdf. If I manually type the correct link in the address field in Internet Explorer then it works.
What is the problem here, and more importently what is the solution to this problem?

This is solved in the Hotfix KB 2899469 for SharePoint Server 2013 October 14, 2014:
http://blogs.technet.com/b/stefan_gossner/archive/2014/10/14/october-2014-cu-for-sharepoint-2013-has-been-released.aspx
I installed the http://support2.microsoft.com/kb/2899469 hotfix, and now I can search and open files on external file shares with path and filenames containing non-US-ASCII characters,
without getting "This page can’t be displayed".
Where in the description of this hotfix is written, that it solves the encoding issue?

File Share crawl - NetApp Servers - Permission Issues

hello,
There are many file share contents hosted on NetApp, which are being crawled by the SharePoint 2013 Search engine in our organization.
The Search Crawl account is granted Read and Execute permissions on the Shared Drive. The crawler reads the content and the permissions correctly for the first time.
But once the permissions are modified, like adding new users or removing the existing users, and after triggering a full crawl, the changes w.r.t permissions are not being reflected on the sharepoint search results. However, the same scenario works fine
on a local windows shared drive.
I have learnt that the crawl account should be a part of the group policy Manage Audting and permissions, but also learnt that NetApp doesnt have such a thing. I hope am not the only one with such an issue. Please suggest.
Sreeharsha Alagani | MCTS Sharepoint 2010 |
Linkedin | Blog

Hi Sreeharsha,
As I understand, you are using NetApp for file share, and you would like to know about permission needed for crawl files.
Since the issue is related to third party product, there is no sufficient resource here. Please contact their support engineer. For your convenience:
https://communities.netapp.com/welcome
In addition, I found some articles might help:
https://communities.netapp.com/community/netapp-blogs/msenviro/blog/2013/10/30/best-practices-for-sharepoint-2013-search-service-application-for-smsp
https://kb.netapp.com/support/index?page=content&id=3013718&pmv=print&impressions=false
Regards,
Rebecca Tu
TechNet Community Support

Detailed File Share Auditing not working properly (Applying to All Files)

System is Windows 2008 R2, member server. The Default Domain policy has Audit account logon events, Audit account management, & Audit privilege use turned on for Success, Failure...pretty standard. I want to enable Detailed File Share Auditing for a
specific file share on this member server.
The problem is that I am getting audit events in the Security log for folders that do not have Auditing set on them, namely a "My Documents" share for Folder Redirection and \\*\IPC$ The root of the drive has nothing set for auditing. Again I only
set it on a single folder and sub-folders under that. What am I missing here?
I run the command on the member server to set this up (auditpol /set /subcategory:"Detailed File Share" /success:enable /failure:enable) That works fine.
Result of auditpol /get /category:"Object Access" :
System audit policy
Category/Subcategory                      Setting
Object Access
File System                             No Auditing
Registry                                No Auditing
Kernel Object                           No Auditing
SAM                                     No Auditing
Certification Services                  No Auditing
Application Generated                   No Auditing
Handle Manipulation                     No Auditing
File Share                              No Auditing
Filtering Platform Packet Drop          No Auditing
Filtering Platform Connection           No Auditing
Other Object Access Events              No Auditing
Detailed File Share                     Success and Failure
Now I went to the file share to set the audit permissions. Security>>Advanced>>Auditing>>Continue. Set Everyone Full Control for Success and Failure (all boxes checked).
I am using NTFS permissions for security, the share level permission on the folder are Everyone Full.
Michael Maxwell

I think found the reason. Could someone please clarify this statement for me?
Since there are no SACLs for shares, once this setting is enabled, access to all shares on the system will be audited.
So what is the workaround for this? Is there one? I'm confused as usual.
Michael Maxwell

Setting permissions in File shares content sources

Similar Messages

Maybe you are looking for