Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Tiger - AD-Users - Samba problem - copying only first ofMultiple Files

Title: Re: Tiger - AD-Users - Samba problem - copying only first ofMultiple Files
I’ve e-mailed some people off-list, but I want to ask a question here of everyone dealing with this problem.

Does anyone know a way to force AD-bound Macs to not pass AD information when attempting to mount servers?

I’m trying to see if we can absolutely stop this, if we can work around the problem being discussed here.

We know from our tests that a local account on an AD bound computer can connect to our smb shares using a student’s name/pass and have correct operation of the share.  If we do the same from an non-AD bound mac, it also works.

The problem rears it head when a user logs in on an AD bound computer and is authenticated via AD.  once that has happened, even if we do a terminal connect to their smb share and include their name/pass in the connect string, the permissions problem will appear.   BUT if we log that user in, then do a sudo_mountsmbfs and use their credentials in the mount, the problem will go away.

We’ve tried setting the execute as of the mount binary to root.... as well as the scripts and apps we use to mount our smb shares... but this has not given the same results as the sudo mount....

So... as a test, we’re trying to stop the Macs from passing their AD information along when  mounting file servers...but we haven’t found a way to absolutely stop it.


We’ve tried a few things to do this...but haven’t been successful, so I won’t enumerate them here.

We’re open to suggestions.

If anyone’s heard anything definitive, or at least hopeful, from Apple on when they will get the AD plugin fixed so it at least works as well as it did under 10.3 in this respect, let us know that, too.

Thanks
Jay Christianson
Macintosh Support Specialist
University of Wisconsin – Stevens Point


From: "Ball, Dan" <email@hidden>
Date: Mon, 12 Dec 2005 17:43:31 -0500
To: <email@hidden>
Cc: <email@hidden>
Conversation: Tiger - AD-Users - Samba problem - copying only first ofMultiple Files
Subject: RE: Tiger - AD-Users - Samba problem - copying only first ofMultiple Files

Arndt,

Seeing the same thing here with 10.4.3 with latest updates.   Glad you pointed this out!!  I probably would have ran across it tonight or tomorrow cause I just started testing file copying and stuff to the server tonight with our image, but glad you posted it.  Woke me up!...lol

We are looking to purchase the new iMacs to upgrade our labs, roughly 80 and now we will probably have to wait until this bug gets fixed.  Adobe forces users to work locally with files and you have this bug and can't copy them to the server!  Very nice!

10.4.x is beta as far as I am concerned, its not even ready for 1.0 release yet!  I hope 10.5 isn't this buggy when its released to compete against LongHorn(Vista).

I also noticed that groups for administration set within Directory Access from AD don't work as well.

Anyway....confirmed bug here!   I'm posted it to bugreports.apple.com

Thanks,

Dan



----------Original Message-----------

Hi,

Since Tiger (latest updates installed) Active Directory Users can copy
only one file to Win2K and WinXP 2003 Servers via the Finder.

When trying to copy a folder with files in it, the folder is created on
the fileserver, but it is empty. You get a permission denied error.

When trying to copy multiple files, only the first one is copied and you
get the permission denied error again.

It is not a permission issue. Even if the the AD-user is Domain Admin
and/or has full access, the error is reproducible.
It happens with and without Kerberos tickets.

In Panther we didn't see this problem.
It doesn't occur when you are not logged in as AD-User but access the
Win-Servers as one.


I think it is a Finder problem.

Has anybody seen this before?

Thanks for any advice,

Arndt Roth
UNIX Systemadministration
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.apple.com/mailman/private/client-management/attachments/20051212/facc36c8/attachment.html
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Client-management mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/client-management/email@hidden

This email sent to email@hidden
 
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Client-management mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/client-management/email@hidden

This email sent to email@hidden


Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.