samba - Jun 2016 - Samba 4.2 - OS X 10.11 - permissions are being ignored

Hi,
when saving a file to this share the permissions (0777) are being 
ignored under OS X 10.11.5. All files will get these permissions: 0755. 
I don't know why?

Samaba Version 4.2.7-SerNet-RedHat-19.el6
CentOS release 6.7

[global]
         workgroup = BAVARIA
         server string = Samba Server %m
         netbios name = NASBAV1

         log file = /var/log/samba/%m_%a_%R.log
         max log size = 50
         log level = 1

	security = user
         encrypt passwords = yes

         preferred master = no

         printcap name = /etc/printcap
         load printers = no

[nova1]
         comment = projects share
         path = /data/nova1
         read only = No
         valid users = lustreuser
	vfs objects = catia fruit streams_xattr
                 fruit:resource = file
                 fruit:metadata = netatalk
                 fruit:locking = none
                 fruit:encoding = private
        force directory mode = 0777
        force create mode = 0666

Kind regards,
Martin

On Thu, Jun 09, 2016 at 02:11:15PM +0200, Martin Markert
wrote:
> Hi,
> when saving a file to this share the permissions (0777) are being
> ignored under OS X 10.11.5. All files will get these permissions:
> 0755. I don't know why?
Remember, "force XXX mode" only applies to file/directory
creation. The client is then free to change permissions
after the object is created.

> [global]
>         workgroup = BAVARIA
>         server string = Samba Server %m
>         netbios name = NASBAV1
> 
>         log file = /var/log/samba/%m_%a_%R.log
>         max log size = 50
>         log level = 1
> 
> 	security = user
>         encrypt passwords = yes
> 
>         preferred master = no
> 
>         printcap name = /etc/printcap
>         load printers = no
> 
> [nova1]
>         comment = projects share
>         path = /data/nova1
>         read only = No
>         valid users = lustreuser
> 	vfs objects = catia fruit streams_xattr
>                 fruit:resource = file
>                 fruit:metadata = netatalk
>                 fruit:locking = none
>                 fruit:encoding = private
>        force directory mode = 0777
>        force create mode = 0666
> 
> Kind regards,
> Martin
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Am 09.06.2016 um 18:16 schrieb Jeremy Allison:
> On Thu, Jun 09, 2016 at 02:11:15PM +0200, Martin Markert wrote:
>> Hi,
>> when saving a file to this share the permissions (0777) are being
>> ignored under OS X 10.11.5. All files will get these permissions:
>> 0755. I don't know why?
>
> Remember, "force XXX mode" only applies to file/directory
> creation. The client is then free to change permissions
> after the object is created
the following settings are making wonders for the braindead OSX clients, 
especially "nt acl support = no" since there is no other way to ensure
owner *and* group ending with write permissions

  inherit permissions = yes
  inherit acls = yes
  nt acl support = no

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20160609/a32892bc/signature.sig>

On Thu, Jun 09, 2016 at 02:11:15PM +0200, Martin Markert
wrote:
> Hi,
> when saving a file to this share the permissions (0777) are being ignored
> under OS X 10.11.5. All files will get these permissions: 0755. I don't
know
> why?
> 
> Samaba Version 4.2.7-SerNet-RedHat-19.el6
> CentOS release 6.7
> 
> [global]
>         workgroup = BAVARIA
>         server string = Samba Server %m
>         netbios name = NASBAV1
> 
>         log file = /var/log/samba/%m_%a_%R.log
>         max log size = 50
>         log level = 1
> 
> 	security = user
>         encrypt passwords = yes
> 
>         preferred master = no
> 
>         printcap name = /etc/printcap
>         load printers = no
> 
> [nova1]
>         comment = projects share
>         path = /data/nova1
>         read only = No
>         valid users = lustreuser
> 	vfs objects = catia fruit streams_xattr
>                 fruit:resource = file
>                 fruit:metadata = netatalk
>                 fruit:locking = none
>                 fruit:encoding = private
>        force directory mode = 0777
>        force create mode = 0666
"fruit:nfs_aces = no" should do the trick.

Cheerio!
-slow

Am 2016-06-09 18:16, schrieb Jeremy Allison:
> On Thu, Jun 09, 2016 at 02:11:15PM +0200, Martin Markert wrote:
>> Hi,
>> when saving a file to this share the permissions (0777) are being
>> ignored under OS X 10.11.5. All files will get these permissions:
>> 0755. I don't know why?
> 
> Remember, "force XXX mode" only applies to file/directory
> creation. The client is then free to change permissions
> after the object is created.
Yes, I know. But after simply creating a folder within the Finder the 
folder got these permissions on the share: 0755 and not 0777
> 
> 
>> [global]
>>         workgroup = BAVARIA
>>         server string = Samba Server %m
>>         netbios name = NASBAV1
>> 
>>         log file = /var/log/samba/%m_%a_%R.log
>>         max log size = 50
>>         log level = 1
>> 
>> 	security = user
>>         encrypt passwords = yes
>> 
>>         preferred master = no
>> 
>>         printcap name = /etc/printcap
>>         load printers = no
>> 
>> [nova1]
>>         comment = projects share
>>         path = /data/nova1
>>         read only = No
>>         valid users = lustreuser
>> 	vfs objects = catia fruit streams_xattr
>>                 fruit:resource = file
>>                 fruit:metadata = netatalk
>>                 fruit:locking = none
>>                 fruit:encoding = private
>>        force directory mode = 0777
>>        force create mode = 0666
>> 
>> Kind regards,
>> Martin
>> 
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba

Am 2016-06-09 18:16, schrieb Jeremy Allison:
> On Thu, Jun 09, 2016 at 02:11:15PM +0200, Martin Markert wrote:
>> Hi,
>> when saving a file to this share the permissions (0777) are being
>> ignored under OS X 10.11.5. All files will get these permissions:
>> 0755. I don't know why?
> 
> Remember, "force XXX mode" only applies to file/directory
> creation. The client is then free to change permissions
> after the object is created.
> 
Yes, I know. But after simply creating a folder within the Finder the 
folder got these permissions on the share: 0755 and not 0777
>> [global]
>>         workgroup = BAVARIA
>>         server string = Samba Server %m
>>         netbios name = NASBAV1
>> 
>>         log file = /var/log/samba/%m_%a_%R.log
>>         max log size = 50
>>         log level = 1
>> 
>> 	security = user
>>         encrypt passwords = yes
>> 
>>         preferred master = no
>> 
>>         printcap name = /etc/printcap
>>         load printers = no
>> 
>> [nova1]
>>         comment = projects share
>>         path = /data/nova1
>>         read only = No
>>         valid users = lustreuser
>> 	vfs objects = catia fruit streams_xattr
>>                 fruit:resource = file
>>                 fruit:metadata = netatalk
>>                 fruit:locking = none
>>                 fruit:encoding = private
>>        force directory mode = 0777
>>        force create mode = 0666
>> 
>> Kind regards,
>> Martin
>> 
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba

Am 2016-06-09 19:31, schrieb Ralph Boehme:
> On Thu, Jun 09, 2016 at 02:11:15PM +0200, Martin Markert wrote:
>> Hi,
>> when saving a file to this share the permissions (0777) are being 
>> ignored
>> under OS X 10.11.5. All files will get these permissions: 0755. I 
>> don't know
>> why?
>> 
>> Samaba Version 4.2.7-SerNet-RedHat-19.el6
>> CentOS release 6.7
>> 
>> [global]
>>         workgroup = BAVARIA
>>         server string = Samba Server %m
>>         netbios name = NASBAV1
>> 
>>         log file = /var/log/samba/%m_%a_%R.log
>>         max log size = 50
>>         log level = 1
>> 
>> 	security = user
>>         encrypt passwords = yes
>> 
>>         preferred master = no
>> 
>>         printcap name = /etc/printcap
>>         load printers = no
>> 
>> [nova1]
>>         comment = projects share
>>         path = /data/nova1
>>         read only = No
>>         valid users = lustreuser
>> 	vfs objects = catia fruit streams_xattr
>>                 fruit:resource = file
>>                 fruit:metadata = netatalk
>>                 fruit:locking = none
>>                 fruit:encoding = private
>>        force directory mode = 0777
>>        force create mode = 0666
> 
> "fruit:nfs_aces = no" should do the trick.
Thank you, Ralph. But this option does not fix this behaviour.
After removing the "vfs objects" and "fruit" parameters the
modes and
masks are working. But I would like to use these features.
> 
> Cheerio!
> -slow