NAS and permissions

[stolzy]

Since there was a thread here recently on NAS devices, thought I'd try my luck with a problem,

An LG-NAS serves files to a mixed group of PCs. I've copied all the files over to the NAS from the existing server, but they've lost all the permissions for anyone other than the owner (ie they're all rwx --- --- [700])

How can I give group read/write access? The NAS runs Linus, but there is no way to get a command line on it

Changing the permission on a file browser on a client has no effect.

The files were transfered with rsync -a, but the -a flag was obviously ignored.

Just a punt that someone might know.

 

[Dansin]

Does the NAS not have a browser based interface that you can change the folder and file permissions with? If not, you'll need to learn how to use the chown and chmod commands on your NAS via telnet.

 

[stolzy]

Does the NAS not have a browser based interface that you can change the folder and file permissions with? If not, you'll need to learn how to use the chown and chmod commands on your NAS via telnet.

Yes there is a browser interface, but no possibility to change permissions. You can create users and groups, but its all a bit irrelevant if they don't have permissions to the files.

chown and chmod hold no fears for me (this NAS has replaced a series of Linux servers), but there's no telnet or ssh interface on the NAS.

 

[Dansin]

If it's Linux I'd be amazed if you can't ssh into it. What NAS is it? Is this any help?

I now use a Netgear Stora now which also runs Linux. Openstora is a really great forum for it. Someone there may be able to help further.

 

[Dansin]

Another thought and not sure it would even work but:-

Assuming you're not already running Linux pc's, download and burn an Ubuntu installation cd/dvd. Reboot pc and boot into an Ubuntu live cd session. Copy all files over from the server and in a terminal run chmod 777 (or whatever is required) on the relevant files/folders. Copy back to server.

Probably far too simplistic and written after a couple of beers.

 

[ianf]

Something to think about is the client pc is probably connecting using smb and the nas is likely running samba to emulate it.

Is there a smb.conf file in /etc/samba/smb.conf?

In in there can be a file creation mask that gets applied when files are created

[salesdoc]
path = /home/shared/sales
write list = rocky sys
create mask = 0775

Is there a web service running on port 901 (swat)?

 

[stolzy]

Another thought and not sure it would even work but:-

Assuming you're not already running Linux pc's, download and burn an Ubuntu installation cd/dvd. Reboot pc and boot into an Ubuntu live cd session. Copy all files over from the server and in a terminal run chmod 777 (or whatever is required) on the relevant files/folders. Copy back to server.

Probably far too simplistic and written after a couple of beers.

The problem is that when the files are copied to the NAS all permissions are changed to 700, regardless of what they were originally.

 

[stolzy]

If it's Linux I'd be amazed if you can't ssh into it.

macprostolzy$ ssh 192.168.0.7
ssh: connect to host 192.168.0.7 port 22: Connection refused
macprostolzy$

What NAS is it? Is this any help?

Maybe, seems a bit long winded though. I can't believe this has never happened before.

I now use a Netgear Stora now which also runs Linux. Openstora is a really great forum for it. Someone there may be able to help further.

I'll give it a try.
Thanks for your help.

 

[stolzy]

Something to think about is the client pc is probably connecting using smb and the nas is likely running samba to emulate it.

Is there a smb.conf file in /etc/samba/smb.conf?

Files are served AFP since all the clients are Macs. Samba is disabled

 

[ianf]

You'd have got more points for saying that upfront... "An LG-NAS serves files to a mixed group of PCs"

What is your current umask (umask -p) ?

What version of Afp is implemented? 3+ with posix acls?

It might be deliberate, expecting the owner to add in extra acls after creation.

 

[Dansin]

macprostolzy$ ssh 192.168.0.7
ssh: connect to host 192.168.0.7 port 22: Connection refused
macprostolzy$

You might need a bit more than the above to ssh into it. To get into the Stora I have to use:-

ssh dansin_hipserv2_netgear_****-****-****-****@192.168.0.10

With the *'s being the serial number of the box. Then password as normal.

 

[ianf]

Can you try something?

Do the local files have a + in the status shown with ls -l?

Does ls -le@o give you clues about the local file extended attributes?

See if using rsync with the -E flag copies the extended attributes that includes posix acls?

Does the nas support hfs+ or another file system with extended attributes?

 

[stolzy]

You'd have got more points for saying that upfront... "An LG-NAS serves files to a mixed group of PCs"

It was a mixed group of PC, but I've diabled samba on the NASto reduce the number of variables

What is your current umask (umask -p) ?

0022

What version of Afp is implemented? 3+ with posix acls?

No way to tell.

It might be deliberate, expecting the owner to add in extra acls after creation

Seems a bit odd, its supposed to share files out of the nox - it is after all, a NAS device. No problem to create uses and the users can access services on the NAS, just not files.

 

[stolzy]

You might need a bit more than the above to ssh into it. To get into the Stora I have to use:-

ssh dansin_hipserv2_netgear_****-****-****-****@192.168.0.10

With the *'s being the serial number of the box. Then password as normal.

But who's to know what to subsitiute for 'dansin_hipserv2_netgear_' The manual is silent on the topic, as are the forums

 

[stolzy]

Another update:

Spent an enjoyable hour on the phone to LG this morning. Turns out there is an ssh daemon on the LG-NAS, but they 'are not allowed to tell me how to activate it'!

They have no solution for how to change permissions on the NAS and agree it is impossible to change them via the web interface.

Basically the device can't be made to work on a network for more than one user.

When I discussed returning it they said I am unlikely to get a refund since the device is working to specification.

Basicaly, I'm stuffed, left holding a useless paperweight.

 

[ianf]

Have you googled enough?

http://lgnas.wordpress.com/2011/05/07/ssh/

Is it on another port? What model, what firmware?

 

[stolzy]

Have you googled enough?

http://lgnas.wordpress.com/2011/05/07/ssh/

I'd guessed that the big secret is the port ssh is listening on. Unfortunaltly on mine, it apparently isnt 2210

Is it on another port?

Evidently, but I don't see how to find out

What model

N2R1 DD2

what firmware?

1.0.0_2407

 

[Buttso]

I dont know if you are a fan of doing this..

but this portal I use for all my NAS boxes is very good.
they have hacked firmwares based on the offical releases.. you can upgrade the firmware to include all the standard stuff you should have (SSH etc) on the standard ports.
I presume this is the model you have (from the notes you put above)

my own terastation was exactly the same.. I had to hack the firmware to include basic telnet and other goodies

dont know if it is for you, but at least it is something to consider

http://forum.nas-portal.org/showthread.php?8873-Tantalus-Firmwares

my Chrome browser automatically translates, dunno about other browsers..

 

[repomanbe]

Here in English