On 12/01/2006, at 7:44 , Brian Tully <
btully@gsto...>,:
>> Unless someone can enlighten me, it seems I was sadly mistaken. I
>> STILL have to run the very same cron jobs to reset permissions on
>> all shared files. Not only that, it appears that we can no longer
>> use Dreamweaver's check-in/check-out feature, as Dreamweaver's
>> "lock" prevents the file's permissions from getting reset.
We'd really need to know how you are mounting shares, how files are
created and accessed.
If you are trying to do it the 'unix' way (i.e. automount at boot
time) and are using AFP, then you're hosed. From the permission
problems you are mentioning, it sounds very much like that. When you
mount AFP shares automatically, they are mounted by the
administrator, and thus inherit the administrator's priviledges
(well, it's a bit more compiicated, but close to reality) - which is
not what you want! You'll want to mount with the user's priviledges.
In our case, the solution was to mount all drives which allow
writing, with a script (a simple apple script with tells the finder
to mount the shares) at login time. On the server side, I set up
permissions to allow group read and write access, put all users which
are allowed to write into the appropriate group(s) - making sure the
server knows of all these people and groups.
That now works quite well.
(In solaris and linux this is accomplished with a simple nfs mount at
boot time - but of course, this is insecure if the user of the client
has root access!!)
Robert
Departement Informatik FGB tel +41 (0)61 267 14 66
Universität Basel fax. +41 (0)61 267 14 61
Robert Frank
Klingelbergstrasse 50
Robert.Frank@unib...
CH-4056 Basel
Switzerland http://
www.informatik.unibas.ch/personen/frank_r.html
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (
Macos-x-server@list...)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/subscriber%40opensubscriber.com
This email sent to
subscriber@open...
opensubscriber is not affiliated with the authors of this message nor responsible for its content.