Re: About Group, OpenDirectory, Active Directory and Unix philosophy
Re: About Group, OpenDirectory, Active Directory and Unix philosophy
- Subject: Re: About Group, OpenDirectory, Active Directory and Unix philosophy
- From: Stéphane Sudre <email@hidden>
- Date: Thu, 16 Jun 2005 14:34:54 +0200
On jeudi, juin 2, 2005, at 06:46 PM, Jason Townsend wrote:
On May 25, 2005, at 2:08 PM, Stéphane Sudre wrote:
Let's say I have a user which is authenticating (him|her)self against
an Active Directory Server from (his|her) Mac OS X machine.
This leads the uid tool showing some group ids which are not the
standard ones (20,80,0,501, 502, etc.). For instance: 1547231201.
Now, the user is going to create a file in (his|her) mobile home
folder.
Shall the gid for the file be the one of the parent folder (staff for
instance) or the one shown by uid?
Currently, for a tool, I'm setting the gid of the resulting file to
the gid of the logged user (obtained with getgid()).
Is this wrong from an Unix philosophy point of view?
Additionally, doing this prevents an Apple application from using the
file whereas the uid for the file is perfectly correct and the
permissions are rwx for the user.
Note that the Active Directory plug-in is not part of Darwin. However,
I think your question is still relevant to this list from the
standpoint of file permissions issues.
The GIDs you are seeing are normal for the Active Directory plug-in.
So the question is why can't you access the file if the group is not
set to staff? Are you using 10.3.x or 10.4.x? Are there any ACLs
involved? Perhaps a directory listing (ls -la) from the directory in
question would help.
build:
total 16
drwxrwxrwx 5 jfc wheel 170 Jun 16 13:41 .
drwxrwxrwx 5 jfc wheel 170 May 18 14:04 ..
-rwxrwxrwx 1 jfc wheel 6148 Jun 16 11:46 .DS_Store
drwxr-xr-x 3 jfc ASZINT\d 102 Jun 16 13:31 Microsoft Office
2004.pkg
drwxr-xr-x 3 jfc ASZINT\d 102 Jun 16 13:41 Microsoft Office.pkg
Can you cat the file as the user in question?
Yes for files within the .pkg directory who have the same permissions.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden