SOLVED Lost write access to AFP share from OS X 10.12

[Kevin Horton]

I no longer have write access to AFP shares. The server is running FreeNAS-9.10.1-U4 (ec9a7d3). The client is running OS X 10.12.1. I had write access in the past, but it disappeared sometime in the last week or two (I have been on the road for much of the last two weeks, so wasn't copying anything to the server).

Looking at the permissions on OS X, I see the ownership is listed as Unknown. FreeNAS shows the ownership as the same user (short user name) as on OS X, but looking at the numeric UIDs, I see that they differ (1001 on FreeNAS, and 501 on OS X).

I did rebuild my storage about two weeks ago, replicating everything to a backup pool, then adding a disk and rebuilding the main RAIDZ2 pool to be one disk larger than before, then replicating everything back. I'm wondering if the numeric UID got changed somehow during that process.

Questions:

1. Is it possible that the UID conflict between the server and client is the root cause of my loss of write access?

2. If the UID conflict is the problem, how can I safely change the UID on FreeNAS?

The main folder I use is kwh (my short user name), in the dataset file_server. Below we see the contents of the file_server data set.

Code:

freenas# pwd
/mnt/pool/file_server
freenas# ls -l
total 108
drwxrwxrwx   2 root  wheel	 9 Dec 13 18:26 .AppleDB
drwxrwxrwx   2 root  shared	2 Mar 29  2016 .AppleDesktop
drwxrwxrwt   3 kwh   shared	3 Feb 18  2016 .TemporaryItems
-rw-r--r--   1 kwh   shared  297 Feb 21  2016 .apdisk
drwxr-xr-x  22 kwh   kwh	  33 Dec 13 18:01 kwh
drwxrwxr-x   3 kwh   shared	7 Apr 19  2016 shared
drwxr-xr-x   3 tmh   tmh	   4 Aug  6 15:25 tmh
freenas# ls -ln
total 108
drwxrwxrwx   2 0	 0	   9 Dec 13 18:26 .AppleDB
drwxrwxrwx   2 0	 1003	2 Mar 29  2016 .AppleDesktop
drwxrwxrwt   3 1001  1003	3 Feb 18  2016 .TemporaryItems
-rw-r--r--   1 1001  1003  297 Feb 21  2016 .apdisk
drwxr-xr-x  22 1001  1001   33 Dec 13 18:01 kwh
drwxrwxr-x   3 1001  1003	7 Apr 19  2016 shared
drwxr-xr-x   3 1002  1002	4 Aug  6 15:25 tmh

The following images show the permissions of the file_server dataset and the AFP permissions.

Thanks,

Kevin

 

[Kevin Horton]

I seem to have things sorted out again.

I solved the problem by changing the group for all the files. They were set to a group that matched the user name. I recursively changed them all to a "shared" group I had created, and now everything is happy again. I don't completely understand the relationship between users and groups on the NAS and on clients though. I'll hit up the docs and Google to attempt to grok this better.