Unable to restrict afp folder access using File Sharing in System Prefs

If I share files using AFP, and authenticate using a standard account from another machine on the LAN, I can browse and access ALL files and folders on the machine, not just those specified under "Shared Folders" in System Preferences->Sharing->File Sharing. Machine is running OS 10.6.5.

...You shouldn't be able to authenticate as a user/account that is not on the local machine.
Also for each item listed in Sharing Preferences, you have to specify POSIX permissions for specific users, check to make sure 'everyone' isn't set to read and write.

Similar Messages

Problem using File sharing in a small office network

I have a problem using File sharing on an Imac and Macbook Pro.
My office has a small network running Windows Small office file server 2003. I have one Windows 2000 PC connected to it and 3 Macs, an 2.4 gHz Intel iMac running Leopard 10.5.6 , a MBP running the same and a Mac Mini running 10.5.
From the Finder Shared window of the Mac Mini, I can see all the computers on the network. It also used to be the case for the iMac, but the MBP could never see the Windows PC’s, not the server or the Win2000. This wasn’t a big problem as I was communicating between the Macs and using the shared printer on the iMac.
On Monday Jan 19 the iMac was suddenly unavailable to the other 2 Macs. It was working normally on the Friday. The iMac can access the Mac Mini and copy files to it. The Mac Mini can see the iMac but cannot access it. Even trying to connect as, ends in a failed connection. I have tried rebooting, turning File sharing off and then on again to no avail.
The iMac now also cannot see the Windows PC’s which it previously could.
To get files from the MBP for printing, I now copy it to the Mac Mini and acces the folder from the iMac, a very tedious procedure. I don’t know why this happened and am scared that the Mac Mini is going to do the same thing.
All three computers are also running VMware 2.0 with Windows XP pro, and from VMware the server is visible on all the computers.
Any help will be much appreciated, I live in a small town in South Africa and the local computer suppliers have no knowledge of the Macs.
I think that the problem with the iMac may have started after a software upgrade to 10.5.6 but I am not entirely sure.
Thank you
ajdk

Well, you're current method sounds pretty good. But if you want to user a file server, hey go ahead.
What you want to do when you centralize project files is to keep track of which one is the newest and becareful not to overwrite files with the same name. So you either have to set up individual spaces on the server (separate AFP/FTP folders maybe), or you'll need to run a file checkout service.
The individual space is cheaper, but it's not much of a difference from backing up to the network drive. Since you have Gigabit connections, you might even opt to save ALL the user files on the server instead of just the project files.
If you want to run a file checkout service, there's two approaches. You can run a service that can host any kind of file, or you can run a version control system for each kind of application (Photoshop, Word, etc.). Please notice, that as you read further and further along, the methods become more and more expensive and complicated. Once you get to this point, it will be necessary to purchase or build software in addition to the Mac OS X Server package.

How do i use file sharing with my microsoft pc and mac book?

I have a windows vista pc that my daughter uses and I have a macbook pro and we want to use file sharing for our itunes libararys. We connect to internet with my time capsule. I have both computers itunes file sharing turned on but I can't seem to be able to see them on the network. can someone give me some pointers on how to make this work. thanks

The best way I know is to sign up for iTunes Match. All your music is stored in the cloud and can be accessed by up to 10 devices.

Accessing a file in another system

Hello,
Can Anyone please tell me how to access a file in another system using java.
Thanks in Advance,
Venkat

Hi Venkat
Check following link.
This link is helpful for you
http://java.sun.com/developer/onlineTraining/Programming/BasicJava1/data.html#app
http://www.devdaily.com/java/edu/pj/pj010004/pj010004.shtml
Regards
Ruturaj

App that can access windows file sharing

Hello... I've got my Nokia 500 today, but i'm looking for an app that can access windows file sharing via wifi. I want to transfer my picture from cellphone to my computer via wifi..
Nokia 500 -> Wifi -> Computer (Windows File Sharing)...
Anyone please create an app for me

Telexy SymSMB used to be such an app, but was taken off the market (Nokia demanded it, because apparently some Nokia employees were involved in developing the app). Don't know if anything similar has come out since then.

Using file sharing between iMac and Macbook Air

I have been trying to use file sharing but do not have admin password or disc..When I try to access the iMac from my Air it give the option of using my Apple ID but no password field comes up...I press enter and get the Dialog Box wobble...

I have tried using the guest login but get the message "Access denied to this server, contact administrator". I can access the Air from my iMac but even though they are both running Mavverick some of the dialog boxes appear different. And thats even though I have enabled guest login on the iMac

I have been thrilled to use file sharing for tv programs on my home pc and watch on the ipad, i am having trouble finding out how to sort programs in any correct order, any help?

I have been thrilled to use file sharing for tv programs downloaded on my home pc. I have not been able to sort the program list on the ipad2 to make the list appear in order of showtime or live appearence. Any suggestions?

I have been thrilled to use file sharing for tv programs downloaded on my home pc. I have not been able to sort the program list on the ipad2 to make the list appear in order of showtime or live appearence. Any suggestions?

Wjen i trying to activate my personal file sharing in system 10.4.11 it's not able to start this service so my network computers can't access my computer plz help or advice ??

wjen i trying to activate my personal file sharing in system 10.4.11 it's not able to start this service so my network computers can't access my computer plz help or advice ??

When was the last time you did any of the following?
Restart your computer?
Repaired Permission & restarted your computer?
Run "Repair Disk" from your install DVD?
Please detail all you have done to resolve your issue. Need this information so that the users can avoid the "been there, done that" scenario type responses. This is to avoid repeating the troubleshooting you may have already tried. Thank you.

How to restrict users to access the files directly from /irj/go/km/docs/doc

Dear Experts,
I have made a folder in KM where I have saved some files, and also I have made a application from where user can access those files.
But the users are able to access the files by directly typing the path of the file in internet explorer, I have to restrict it that the user should not be able to access the files directly.
Please give your helpful suggestions.
Warm Regards
Upendra Agrawal
Edited by: Upendra Agrawal on May 15, 2009 4:49 PM

Hello,
You can have a link/button react to a mouse clic by reading the KM document and putting it on the htpp flux with the correct header (this is the same kind of code that is used when you generate the pdf). As the file access is in you server-code, user will not have access to the URL...
an exemple for the WD Java (coming from this [PDF|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0cc41cb-9576-2b10-99a6-ab90ef28c73b]), with slight modifications :
public void exportToPDF( ) {
   //@@begin exportToPDF()
   ByteArrayOutputStream outputStream = null;
   outputStream = new ByteArrayOutputStream();
   // read the file with KM API and copy it to the outputStream
   showPopUp(WDWebResourceType.PDF, outputStream, "PDF Out Put");
   outputStream.close();
//@@end
regards
Guillaume

Blocking access to file sharing (AFP/SMB) from outside of network

Hello all,
Is there a way to block access to file shares from outside of our LAN? I have a machine that has some sharing turned on (it is also my email server) and I can reach it across the internet and mount shares as if I was in the office.
How can I block this access? Both SMB and AFP?
Thank you,
-John

Justin, thank you for your reply. The machine is on a public ip address and is not behind a NAT router. I've turned on the software firewall and that is working now. However, I imagine it would be better to use a hardware firewall. Any suggestions on a good one? Thank you.

Problem using File Sharing to access files from my old emac.

I have a new imac and I'm trying to share files with my older emac. I can access my imac files from my old emac through File Sharing, but I can't seem to access the old emac files from my imac. On my imac I can get to the Drop Box folder through File Sharing, but when I try to open the Drop Box folder I get this error message "The folder “Drop Box” can’t be opened because you don’t have permission to see its contents." What do I need to do to be able to open the Drop Box folder? Where do I need to go to change the permissions so that I can open the Drop Box folder?
Thanks in advance,
George

The easiest way is when you connect, connect as the admin user and you'll be able to access the entire user folder (and more). So (depending on the version of OS) select "connect as..." then put in the username and password of the user you are connecting to (so the details of the eMac you are connecting to). This should allow you to access the entire user folder.
If you select any folder or file, then press command+i (or 'get info' from the file menu in finder), it will launch a window with more info about the file/folder. At the bottom of the window you have "sharing and permissions" - in here you can (after unlocking with admin username and password) add permissions for your user.
The dropbox is usually used to transfer to a machine - so you'd generally use it to drop something from anywhere on your eMac into the dropbox on the iMac, and then you can recover it from the dropbox on the iMac. The permissions are set so anyone from the outside can only write to this folder.

Urgent... how to open particular folder by using file tag

Hi,
I want to select a particular folder using file browsing option in html. why i want this is : i have to update the resumes located in a particular folder. so every time i am opening that folder which is a subfolder.
ex: c:\dir1\dir2\dir3\Resumes
Eveevry time , i have to go to C -> dir1->dir2-->dir3 then Reusmes
what i need is when i click the browsing button, i want to get the Resumes folder directly. Is there any option to do that one by setting value to file tag.
thanks in advance
my mail id [email protected]

Hi venkatanarayanareddy (if that is your real name),
You say you want to use file browsing option in html, which makes me guess this functionality is through a web page. Can you give us a bit more information about how this works as it's not abundantly clear how it relates to Java (JSP?).
On another note (and I woke in customarily pedantic mood this morning), there's no need to post your e-mail address since [in the name of sharing the knowledge and not keeping answers to questions secret between the questioner and respondant] you will find responses posted here in the forum.
Chris.

Urgent.. How to open Particular folder direcly using File Browse tag

Hi,
I want to select a particular folder using file browsing option in html. why i want this is : i have to update the resumes located in a particular folder. so every time i am opening that folder which is a subfolder.
ex: c:\dir1\dir2\dir3\Resumes
Eveevry time , i have to go to C -> dir1->dir2-->dir3 then Reusmes
what i need is when i click the browsing button, i want to get the Resumes folder directly. Is there any option to do that one by setting value to file tag.
thanks in advance

Hi venkatanarayanareddy (if that is your real name),
You say you want to use file browsing option in html, which makes me guess this functionality is through a web page. Can you give us a bit more information about how this works as it's not abundantly clear how it relates to Java (JSP?).
On another note (and I woke in customarily pedantic mood this morning), there's no need to post your e-mail address since [in the name of sharing the knowledge and not keeping answers to questions secret between the questioner and respondant] you will find responses posted here in the forum.
Chris.

Restrict SCEP Proxy access using %machineid%/AD?

Hello,
we want to use AnyConnect w/ SCEP Proxy enrollment to provision machine certificates to devices wich are not members of a windows domain. We use hostscan set the CN of the request to %machineid%. This works so far and the certificate gets downloaded to the device.
The next step would be to restrict access to the provisioning VPN-group, so that only already "known" devices are allowed to load certificates. It would be nice, if this could be done by secondary authentication if there were also a way to pre-fill the username with %machineid%, but pre-filling seems only possible based an already existing certificate.
Some configuration guides suggest, that it should be possible to restrict the SCEP Access via AD, but so far I haven't found any detailed instructions.
Has anyone succeded in such a setup? Any hints are much appreciated.
Thank you,
J.

Hi Bora,
I guess that you are having a username/password for directory manager on OUD proxy (let's say cn=proxymgr / proxypwd), and another username/password for directory manager your ODSEE servers (let's say cn=odseemgr / odseepwd).
When you connect to OUD proxy using cn=proxymgr to perform a search on your backend, OUD proxy creates a connection to the ODSEE backend with the same credentials (because the proxy is configured in use-client-identity mode), i.e. cn=proxymgr / proxypwd. If this user does not exist on ODSEE (or has the same name with a different password), you get an error 49.
To avoid this issue, OUD proxy offers configuration parameters in the proxy-workflow-element: the exclude-list and remote-ldap-server-bind-dn / remote-ldap-server-bind-password. You have to add cn=proxymgr to the exclude-list, and set remote-ldap-server-bind-dn to cn=odseemgr, remote-ldap-server-bind-password to odseepwd.
This way, when connecting with cn=proxymgr, the proxy will know that he should not use the client credentials, but rather cn=odseemgr when discussing with ODSEE backend.
This concept is explained in OUD admin guide, Configuring the Bind Mode.
HTH,
Flo.

How can I allow network users to use File Sharing on 10.8 Server?

I am in the process of setting up a new OS X 10.8 Server. I have exported/imported the network users from my previous OS X 10.6.8 Server using Workspace Manager. I have re-entered the passwords of the users. I have existing clients running (stil logged in).
I have set up the File Sharing service in Server.app. I have several mount points. I have made the Users mount point available for home directories over AFP.
Now, the system administrator can connect to the server and get access to the file shares. So the basic file sharing system works.
Also: the users on a client can get there password verified (e.g. when unlocking screen protection) by the server. It is just AFP they can't get access to, while the system administrator account (OD /Local on the server) can be used. So, the password in the server is OK too. It seems to be a matter of privileges.
But no network user (OD user in directory /LDAPv3/127.0.0.1 on the server) can get access. Where can I give network users privileges for File Sharing on the server?
I did try to add either the "Open Directory Users" group or a specific user that was imported into com.apple.access_afp. If I do that, there is partial success. I can connect to the server from the client with a user account other than system administrator from the server (but connecting is slow). But Mobile Home Sync does not work:
1:: [13/04/05 16:11:10.379] Scheduling next sync of "HomeSync_Mirror" at 2013-04-05 14:11:20 +0000
1:: [13/04/05 16:11:20.782] ==========================================================
0:: [13/04/05 16:11:20.782] Starting automatic sync of "HomeSync_Mirror".
1:: [13/04/05 16:11:20.786] Peer "network" reports changes since last sync.
1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:alias:]: isRemote = NO
1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: peer = <SPeer_FS:0x7fd5a5009520> = local, optionalStoreID = (null), peer.storeIDString = *
1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: rootPath        = /Users/gerben
1:: [13/04/05 16:11:20.786] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: storePath       = /Users/gerben/.FileSync/store.filesyncstatetree
1:: [13/04/05 16:11:20.787] [0x7fd5a9224760/<SStore_FS:0x105db3420>] +[SStore_FS newStore_FSForPeer:rootPath:rootAlias:rootRef:storePath:optionalStoreID:]: rootAlias       = {path='/Users/gerben', targetName='gerben', volumeName='Macintosh HD', type=DIR, volumeCreateDate=2010-08-10-12:58:16, targetCreateDate=2011-08-28-18:39:13, parentDirID=37638, nodeID=3003598, filesystemID=0000 ('0000'), signature=0x482b ('H+'), isBootVolume=YES, isAutomounted=NO, isEjectable=NO, hasPersistentFileIDs=YES, mounted=YES, url='file://localhost/'}
0:: [13/04/05 16:11:20.789] -[SPeer_FS _mountServerCallbackShares:status:]: received error 64
0:: [13/04/05 16:11:20.790] EXCEPTION: _mountServerCallbackShares:status: (Host is down) <-[SPeer_FS mountPeerVolumeWithURLString:] (Peer-FS.m:446): "'(-1)' error 64">
0:: [13/04/05 16:11:20.790] USERINFO: {
0:: [13/04/05 16:11:20.790]     NSLocalizedDescription = "Host is down";
0:: [13/04/05 16:11:20.790] }
0:: [13/04/05 16:11:20.790] BACKTRACE: {
0:: [13/04/05 16:11:20.790] ? | 0x105cb79b7
0:: [13/04/05 16:11:20.790] ? | 0x105cbf0e5
0:: [13/04/05 16:11:20.790] ? | 0x105c2c866
0:: [13/04/05 16:11:20.790] ? | 0x105c2babd
0:: [13/04/05 16:11:20.790] ? | 0x105c2acb4
0:: [13/04/05 16:11:20.790] ? | 0x7fff858bb72a
0:: [13/04/05 16:11:20.790] ? | 0x7fff858bb6a2
0:: [13/04/05 16:11:20.790] ? | 0x7fff874cf8bf
0:: [13/04/05 16:11:20.790] ? | 0x7fff874d2b75
0:: [13/04/05 16:11:20.790] }
1:: [13/04/05 16:11:20.790] Peer "network" is unable to sync. (-[SPeer_FS mountPeerVolumeWithURLString:] (Peer-FS.m:446): "'(-1)' error 64")
0:: [13/04/05 16:11:20.790] Peer "network" is unable to sync. Not enough peers will be available to continue syncing.
0:: [13/04/05 16:11:20.790] Aborting sync of "HomeSync_Mirror".
1:: [13/04/05 16:11:20.790] -[SPeer abortSync] "local"
1:: [13/04/05 16:11:20.797] -[SStore_FS setupWithAlias:andRef:] (Store-FS.m:447): unlink('/Users/gerben/.FileSync/.fstemp.QW1Gh-bhvgEhVwmG3.noindex')
0:: [13/04/05 16:11:20.798] EXCEPTION: !IF <-[SPeer(protected) doPrepareForSyncWithResolvedConflicts:] (Peer.m:1149): "'(([self checkAbort]))'">
0:: [13/04/05 16:11:20.798] BACKTRACE: {
0:: [13/04/05 16:11:20.798] ? | 0x105c2bb66
0:: [13/04/05 16:11:20.798] ? | 0x105c2acb4
0:: [13/04/05 16:11:20.798] ? | 0x7fff858bb72a
0:: [13/04/05 16:11:20.798] ? | 0x7fff858bb6a2
0:: [13/04/05 16:11:20.798] ? | 0x7fff874cf8bf
0:: [13/04/05 16:11:20.798] ? | 0x7fff874d2b75
0:: [13/04/05 16:11:20.798] }
1:: [13/04/05 16:11:20.798] -[SStore_FS deleteStateTreeTurdFile] (Store-FS.m:476): unlink('/Users/gerben/.FileSync/store.filesyncstatetree.statetree_dirty')
1:: [13/04/05 16:11:20.798] Peer "local" is unable to sync. (-[SPeer(protected) doPrepareForSyncWithResolvedConflicts:] (Peer.m:1149): "'(([self checkAbort]))'")
0:: [13/04/05 16:11:20.798] Peer "local" is unable to sync. Not enough peers will be available to continue syncing.
1:: [13/04/05 16:11:20.798] EXCEPTION: SFAbortedException <-[SSyncEngine _waitForPeers:] (SyncEngine.m:1922): "'(_abort)'">
1:: [13/04/05 16:11:20.798] -[SSyncEngine threadMain_SyncEngine_sync:]: sync failed with exception "-[SSyncEngine _waitForPeers:] (SyncEngine.m:1922): "'(_abort)'"".
0:: [13/04/05 16:11:21.066] Sync of "HomeSync_Mirror" encountered errors. (_mountServerCallbackShares:status: (Host is down))
0:: [13/04/05 16:11:21.067] Last successful sync completed at 2013-04-04 20:17:15 +0000.
0:: [13/04/05 16:11:21.067] Finished sync of "HomeSync_Mirror".
1:: [13/04/05 16:11:21.067] Scheduling next sync of "HomeSync_Mirror" at 2013-04-05 14:31:21 +0000
1:: [13/04/05 16:11:21.284] 1-pass sync of "HomeSync_Mirror" took 0.02 seconds

Hi Gerben,
Try creating a brand new user, that's not imported and see if that works. Every user/group has a little gear in the Server.app/Users or Groups which allows specific access to specific services, perhaps filesharing is off in that section?
Is your DNS setup properly? Can you verify that clients can see the FQDN of your server?
After setting up the Users folder for mobilehomes, did you check whether the group and the separate users have access to filesharing? I am able to select the correct homefolder /Users and restrict the homefolder size.
Goodluck!
Jeffrey

Unable to restrict afp folder access using File Sharing in System Prefs

Similar Messages

Maybe you are looking for