Connecting Mac to windows share - gets whole server!

[Pyroman]

Heya,

 

I'm trying to set up a windows share on a mac but when i connect to smb://10.0.0.1/SHARENAME in the left hand bar in the finder it doesn't come up with the folder i wanted it says 10.0.0.1, if you click that it then gives you access to a number of other shared folders on the server that i don't want them to have access to. How do i set it so that it only connects to the folder i want it to?

 

Cheers

[mac_shinobi]

What version of OS X

[Pyroman]

erm... 10.8.4

[Marci]

You should only be able to go into shares that they have permission to go into. If your permissions are set correctly there's nothing to worry about.

 

But...

 

Finder > Preferences > Sidebar > Untick "Show Connected Servers" under 'SHARED'

 

Now drag & drop the end-point (shared folder) you want them to see to the sidebar. You should then be able to pick up and distribute

com.apple.sidebarlists.plist

to your clients via WGM on a per-group basis etc.

[mac_shinobi]

Think its related to lion and mountain lion using smbx instead of just smb

 

Pages of stuff here on an apple forum

 

https://discussions.apple.com/thread/4145388?start=0&tstart=0

 

If enterprise there is this

 

http://www.thursby.com/products/dave.html

 

If personal then maybe this

 

http://eduo.info/apps/smbup

 

NOTE for smbup ( all the below notes are stated on the smbup site )

 

NOTE: SMBUp installs Samba, which in turn replaces Apple’s OS X’s native netbios and SMB services. This means that while connecting to servers from the Finder remains functional, the Finder won’t be able to “browse” network services and servers from the network won’t show up in the Finder’s sidebar. Be advised.

 

NOTE: SMBUp installs Samba, which is a third party software with its own limitations, bugs and incompatibilities. The most visible of this is a problem with handling native OS X (especially Administrator users). The Samba team doesn’t see a reason to fix this and existing workarounds don’t really address the problem. In case the user you want to create is in this situation you’ll see an error from SMBUp telling you that it can’t create it itself. In this case you’ll need to create a local sharing-only user in your machine and create the user in the terminal directly.

 

NOTE: A post has been published with Frequently Asked Questions (FAQ). You can find it at http://eduo.info/2013/07/13/smbup-faq

 

HTH a bit

[mac_shinobi]

You should only be able to go into shares that they have permission to go into. If your permissions are set correctly there's nothing to worry about.

 

But...

 

Finder > Preferences > Sidebar > Untick "Show Connected Servers" under 'SHARED'

 

Now drag & drop the end-point (shared folder) you want them to see to the sidebar. You should then be able to pick up and distribute

com.apple.sidebarlists.plist

to your clients via WGM on a per-group basis etc.

 

Has the smbx issue been sorted out then to work with smb or visa versa ?

[mac_shinobi]

http://www.edugeek.net/members/antoniorocco.html

@AntonioRocco - should be able to help.

[Marci]

I honestly dunno fella - never experienced the SMBX issues directly myself... everything's always worked fine for me *shrug*.

 

I've always forced "Show Connected Servers" off in Finder > prefs > sidebar tho as it's always shown the Server root, whereas showing "connected servers" on desktop (finder > prefs > general) always shows the actual share end-point, and then drag n' dropped that to Favorites in sidebar for convenience.

[seawolf]

This is not an SMBX issue. If they are able to access shares they shouldn't then you don't have your permissions set correctly, it's as simple as that. The Mac is just exposing an existing permissions issue.

 

Now, if you can see all of the shares on the server in the sidebar, but the user can only access the ones you want them to then its working correctly and your permissions are not a problem. That is expected behaviour.. I normally turn off the finder sidebar showing connected servers and computers so users aren't confused. That way the user can only see the shares they have access to on the desktop or by clicking on the computer icon in the sidebar.

 

With SMB on a Windows file server, you do lose spotlight searching and speeds are slower than with AFP. We use ExtremeZ-IP to provide native AFP file services and spotlight searching on our Windows file servers. It makes using windows print services easier on the mac than PC as well. With ExtremeZ-IP our macs can mount shares and transfer files as fast as Windows clients and can search file shares far faster than PCs due to the spotlight indexing.

 

Another alternative I like to use to host files in a mixed client environment is to use a FreeNAS server, which provides both SMB and AFP file sharing services as well spas excellent AD integration for authentication.

[Pyroman]

Sorry the question wasn't phased terribly well, as a staff member they have Permissions on those folders but for my purposes they don't need access (they need to get to a staff shared area over VPN but don't really need to access the APPS folder and global shares etc.) I just wanted to make it nice and easy so it just goes straioght to the STAFF share. I've done this by hiding the connected servers and just adding the STAFF folder to favorites in the sidebar. Thank for your help =D

[mac_shinobi]

This is not an SMBX issue. If they are able to access shares they shouldn't then you don't have your permissions set correctly, it's as simple as that. The Mac is just exposing an existing permissions issue.

 

Now, if you can see all of the shares on the server in the sidebar, but the user can only access the ones you want them to then its working correctly and your permissions are not a problem. That is expected behaviour.. I normally turn off the finder sidebar showing connected servers and computers so users aren't confused. That way the user can only see the shares they have access to on the desktop or by clicking on the computer icon in the sidebar.

 

With SMB on a Windows file server, you do lose spotlight searching and speeds are slower than with AFP. We use ExtremeZ-IP to provide native AFP file services and spotlight searching on our Windows file servers. It makes using windows print services easier on the mac than PC as well. With ExtremeZ-IP our macs can mount shares and transfer files as fast as Windows clients and can search file shares far faster than PCs due to the spotlight indexing.

 

Another alternative I like to use to host files in a mixed client environment is to use a FreeNAS server, which provides both SMB and AFP file sharing services as well spas excellent AD integration for authentication.

 

So smbx works with smb 2.0 then.

[seawolf]

The only problems I've seen with it are that some Windows clients (and all Xerox copiers) are unable to connect to an SMBX file share hosted on a 10.8 server. 10.6 and prior mac clients might also have problems, but I haven't tested that. I've found no issues the other way around though (Mac client to Windows server).

[mac_shinobi]

I will just stay subscribed and watch this thread :-)

 

Appologies @Pyroman - hopefully Antonio can help

Edited July 23, 2013 by mac_shinobi

[Pyroman]

I will just stay subscribed and watch this thread :-)

 

Appologies @Pyroman - hopefully Antonio can help

 

No worries, i've done what i needed to do :-) I'm a total mac novice. Usually when you specify a windows share in windows it points you to that share only ( I know if you browsed then the same credentials would allow you into others), it just surprised me that it gave you a link to the server with the other shares, not just the one i was after.

[mac_shinobi]

This is not an SMBX issue. If they are able to access shares they shouldn't then you don't have your permissions set correctly, it's as simple as that. The Mac is just exposing an existing permissions issue.

 

Now, if you can see all of the shares on the server in the sidebar, but the user can only access the ones you want them to then its working correctly and your permissions are not a problem. That is expected behaviour.. I normally turn off the finder sidebar showing connected servers and computers so users aren't confused. That way the user can only see the shares they have access to on the desktop or by clicking on the computer icon in the sidebar.

 

With SMB on a Windows file server, you do lose spotlight searching and speeds are slower than with AFP. We use ExtremeZ-IP to provide native AFP file services and spotlight searching on our Windows file servers. It makes using windows print services easier on the mac than PC as well. With ExtremeZ-IP our macs can mount shares and transfer files as fast as Windows clients and can search file shares far faster than PCs due to the spotlight indexing.

 

Another alternative I like to use to host files in a mixed client environment is to use a FreeNAS server, which provides both SMB and AFP file sharing services as well spas excellent AD integration for authentication.

 

Extremez-IP - is that free ? Also If not then how much ? Also what is there website ?

[seawolf]

Extremez-IP - is that free ? Also If not then how much ? Also what is there website ?

 

http://www.grouplogic.com/enterprise-file-sharing/mac-windows-file-sharing/

 

No, it's not free, but the license is perpetual and for concurrent clients (not per seat). The price may scare away some, and for the 3 and 10 client license versions I think it is too expensive - unless the 3 or 10 clients you needed to support were the heads of the organisation - but the cost for 25 or more are very reasonable if you make use of allow the features including the ExtremeZ-IP Zidget (fantastic for BYOM - "Bring Your Own Mac"). Schools do get a discount off the retail pricing. It's not half off, but it is cheaper.

 

http://www.grouplogic.com/store/index.cfm?cfid=34671218&cftoken=af5fb6375afcb6ec-0B2D3FC3-A94A-BB66-E99FF356EB6FA199&fa=pricing

[Marci]

You can install coLinux and the AFP protocol on Windows, and then map thru that to get what ExtremezIP charge for...

[seawolf]

You can install coLinux and the AFP protocol on Windows, and then map thru that to get what ExtremezIP charge for...

 

I haven't tried coLinux, but AFP protocol isn't available for W2K8 R2. This used to be possible to do on SVR 2003, but MS stopped developing it. In any case, ExtremeZ-IP doesn't just provide AFP file services, it also supports DFS, spotlight searching on the Windows server, and also provides Windows print services that just work. It also has the Zidget (widget), which makes it much more user friendly in a school or BYOD environment.

 

I tried all of the free or inexpensive solutions at the time before purchasing ExtremeZ-IP, but none of them held a candle to it in ease of use, features, and performance (for IT and the end-user). The other solutions might be adequate in some instances or if you have a cash-starved IT budget.

[mac_shinobi]

I haven't tried coLinux, but AFP protocol isn't available for W2K8 R2. This used to be possible to do on SVR 2003, but MS stopped developing it. In any case, ExtremeZ-IP doesn't just provide AFP file services, it also supports DFS, spotlight searching on the Windows server, and also provides Windows print services that just work. It also has the Zidget (widget), which makes it much more user friendly in a school or BYOD environment.

 

I tried all of the free or inexpensive solutions at the time before purchasing ExtremeZ-IP, but none of them held a candle to it in ease of use, features, and performance (for IT and the end-user). The other solutions might be adequate in some instances or if you have a cash-starved IT budget.

 

OS X 10.9 is from what I can gather going to use smb 2

 

http://arstechnica.com/apple/2013/06/new-os-x-uses-windows-file-sharing-by-default/

 

http://appleinsider.com/articles/13/06/11/apple-shifts-from-afp-file-sharing-to-smb2-in-os-x-109-mavericks

 

Not to imply or say that extreme z is redundant with all of its features

[seawolf]

OS X 10.9 is from what I can gather going to use smb 2

 

http://arstechnica.com/apple/2013/06/new-os-x-uses-windows-file-sharing-by-default/

 

http://appleinsider.com/articles/13/06/11/apple-shifts-from-afp-file-sharing-to-smb2-in-os-x-109-mavericks

 

Not to imply or say that extreme z is redundant with all of its features

 

SMB2 has several advantages over AFP, but unless Apple is able to implement spotlight metadata in the protocol (which I have heard no mention of in any technical articles) then I will continue to use AFP for a while longer in favour of SMB2. Losing spotlight searching of network shares isn't something I'm looking forward to. Hopefully Apple will find some way to keep all of that spotlight goodness with SMB in the future, perhaps using a Win SVR service or plugin.

[mac_shinobi]

SMB2 has several advantages over AFP, but unless Apple is able to implement spotlight metadata in the protocol (which I have heard no mention of in any technical articles) then I will continue to use AFP for a while longer in favour of SMB2. Losing spotlight searching of network shares isn't something I'm looking forward to. Hopefully Apple will find some way to keep all of that spotlight goodness with SMB in the future, perhaps using a Win SVR service or plugin.

 

Thumbs up to that and im with you on spotlight !!

[RAS]

You should only be able to go into shares that they have permission to go into. If your permissions are set correctly there's nothing to worry about.

 

But...

 

Finder > Preferences > Sidebar > Untick "Show Connected Servers" under 'SHARED'

 

Now drag & drop the end-point (shared folder) you want them to see to the sidebar. You should then be able to pick up and distribute

com.apple.sidebarlists.plist

to your clients via WGM on a per-group basis etc.

 

Hi. Do you know how to do this using Mavericks Server (i.e., without WGM)? Thanks!

[seawolf]

Hi. Do you know how to do this using Mavericks Server (i.e., without WGM)? Thanks!

 

You would need to do this with either ARD or something like Casper Suite, which can push out policies containing edited plist files with the custom settings. You can't do this with Profile Manager (unless I have really missed something in using it over the past two years!)