Bug #1718

MacOS X Lion (10.7) Finder access denied

Added by Gordon Ross over 2 years ago. Updated about 2 years ago.

Status:Resolved Start date:2011-11-03
Priority:Normal Due date:
Assignee:Gordon Ross % Done:

100%

Category:- Spent time: -
Target version:-
Difficulty:Medium Tags:needs-triage

Description

Finder in MacOS 10.7 connecting to illumos native SMB service gets access denied.

(Nexenta issue 6809)

illumos1718.patch (459 Bytes) Gordon Ross, 11/03/2011 01:49 am

History

Updated by Gordon Ross over 2 years ago

Comparing snoop traces from MacOS 10.6 and 10.7:

The only differences between 10.6 and 10.7 is the requested access.
In 10.6 the client passes access_mask = 1 (read access) and in 10.7
the client passes access_mask = 0 (no access). We currently return
access denied for Create&X with access_mask==0.

Ideally, MacOS should not send access_mask==0 here.

On the other hand, Windows will gratuitously assume you
want "read_control" in your access with NtCreateFile, and
just adds that on the server side. That's why this MacOS
10.7 client works with Windows.

The result is: we need to do like windows here.

Updated by Gordon Ross over 2 years ago

one-line fix!

Updated by Gordon Ross over 2 years ago

  • Status changed from New to Resolved
  • % Done changed from 80 to 100
changeset:   13513:f84d4672fdbd
tag:         tip
user:        Gordon Ross <gwr@nexenta.com>
date:        Wed Nov 09 18:47:36 2011 -0500

description:
    1718 MacOS X Lion (10.7) Finder access denied
    Reviewed by: Dan McDonald <danmcd@nexenta.com>
    Reviewed by: Albert Lee <trisk@nexenta.com>
    Reviewed by: Andrew Stormont <Andrew.Stormont@nexenta.com>
    Reviewed by: Richard Lowe <richlowe@richlowe.net>
    Approved by: Eric Schrock <eric.schrock@delphix.com>

modified:
   usr/src/uts/common/fs/smbsrv/smb_common_open.c

Updated by Adam K-F about 2 years ago

Can we get a "target_release" tag installed here? I'm curious to see whether this patch will be included in 151 stable?

Updated by Matt Connolly about 2 years ago

Adam K-F wrote:

Can we get a "target_release" tag installed here? I'm curious to see whether this patch will be included in 151 stable?

Take a look at the source tree: http://hg.openindiana.org/sustaining/oi_151a/illumos-gate/summary

If you follow the graph or commit history, you will see it is in the prestable build already. I'm running it on two machines already, no problems.

Also available in: Atom PDF