Hey there,
I'm having a strange problem with a freshly deployed FAS2240 (8.1.2P3). Some OSX Clients (iMacs, Macbooks, etc.) are having troubles to write files to the CIFS shares on that filer. The share itself looks like this:
VOLUME /vol/CIFS_SHARES/VOLUME ... access based enum supported ... client side caching disabled NT AUTHORITY\Authenticated Users / Full Control
qtree status
Volume Tree Style Oplocks Status -------- -------- ----- -------- --------- CIFS_SHARES ntfs enabled normal CIFS_SHARES VOLUME ntfs enabled normal
File permissions on the root of the share look like that:
[cid:image001.png@01CE45E7.10730B60]
Except for the "Authenticated Users" entry, all other groups do have "Full Control" Permissions on that share (at the root of the share). At the root level of this share, there are several folders which do have permission inheritance disabled, i.e.:
\netapp\VOLUME\DepartmentAfile:///\\netapp\VOLUME\DepartmentA \netapp\VOLUME\DepartmentBfile:///\\netapp\VOLUME\DepartmentB ...
On each of these subfolders, the permissions look like that:
[cid:image002.png@01CE45E7.CDEE9510]
So the SYSTEM group as well as some custom active directory groups do have Full Control on this folder and all of its subfolders. The users in question are part of one of these groups (in that specific case, part of the group "Creative Services") and can map the share and see it (which they cannot for other shares where they are not member of the respecitve groups, so ABE is working as it should).
Anyhow, no matter what I do, at all of these DepartmentX folders, I do see the read-only item grey-checked and cannot remove that, no matter what I do:
[cid:image003.png@01CE45E7.CDEE9510]
That does not seem to be a problem at all for all the Microsoft Windows clients, they can work and store files without issues - but the OSX clients seem to have problems for whatever reason. The error message they are getting when trying to store a file in one of the folders there is (translated, the client is running in local language here):
Adobe Photoshop Couldn't save file "xyz.psd" because no write access has been granted.
I'm thankful for any ideas you guys might have - maybe I'm missing just a small thing here in my setup.
Thanks,
Alexander Griesser System-Administrator
ANEXIA Internetdienstleistungs GmbH
Telefon: +43-463-208501-320 Telefax: +43-463-208501-500
E-Mail: ag@anexia.atmailto:ag@anexia.at Web: http://www.anexia.at
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
Hi,
On 2013-04-30 21:22, Alexander Griesser wrote:
I’m having a strange problem with a freshly deployed FAS2240 (8.1.2P3).
Some OSX Clients (iMacs, Macbooks, etc.) are having troubles to write files to the CIFS shares on that filer.
I don't have an idea why this doesn't work at the moment, but I have a suggestion that might help you try to narrow it down.
You could try to set up a sectrace filter for one of the troublesome clients in question, have the user re-create the problem and look at the resulting console messages. Maybe something of interest pops up.
You'd use sectrace like this: NETAPP01> sectrace add -ip <IP of OS X client>
If any requests from the specified IP return an error, a console message with diagnostic output will be displayed. Actually, quite a lot of output will be produced ;-)
Don't forget to delete the filter after you're done, because you _definitely_ don't want to have this thing constantly on!
Regards, Oliver
Hi Oliver,
Thanks, didn't know about sectrace by now - sounds like a plan, will try to use that in the next few days with one of the clients.
Bye,
Alexander Griesser System-Administrator
ANEXIA Internetdienstleistungs GmbH
Telefon: +43-463-208501-320 Telefax: +43-463-208501-500
E-Mail: ag@anexia.at Web: http://www.anexia.at
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
-----Ursprüngliche Nachricht----- Von: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] Im Auftrag von Oliver Brakmann Gesendet: Dienstag, 30. April 2013 21:56 An: toasters@teaparty.net Betreff: Re: Ready-only folder troubles with MAC OSX Clients on a NetApp CIFS Share
Hi,
On 2013-04-30 21:22, Alexander Griesser wrote:
I’m having a strange problem with a freshly deployed FAS2240 (8.1.2P3).
Some OSX Clients (iMacs, Macbooks, etc.) are having troubles to write files to the CIFS shares on that filer.
I don't have an idea why this doesn't work at the moment, but I have a suggestion that might help you try to narrow it down.
You could try to set up a sectrace filter for one of the troublesome clients in question, have the user re-create the problem and look at the resulting console messages. Maybe something of interest pops up.
You'd use sectrace like this: NETAPP01> sectrace add -ip <IP of OS X client>
If any requests from the specified IP return an error, a console message with diagnostic output will be displayed. Actually, quite a lot of output will be produced ;-)
Don't forget to delete the filter after you're done, because you _definitely_ don't want to have this thing constantly on!
Regards, Oliver _______________________________________________ Toasters mailing list Toasters@teaparty.net http://www.teaparty.net/mailman/listinfo/toasters