mac 10.4 user permissions

[choran]

After a recent rebuild of 10.4 and Open Directory an engineer could only get the users to match up with their homefolders correctly by resetting permissions. Now students can navigate to each other's folders. Does anyone know of a quick way to set permissions on a group of folders so only the user has access? I guess it will involve a username wildcard

TIA

[HodgeHi]

look at the AD-OD integration paper on the AFP548 website. They have a script at the end that supposed to assign permissions to each home dir if i recall correctly.

 

I have not used it though so cannot comment on how it works. I just now its there. It may be what you are looking for...

 

Let me know how it goes as i have had to do this this past week. I only have 250 users so assigning the permissions manually wasn't so bad.

 

It sounds like he has propagated the everyone read-only on the share-point.

[gaz350]

used passenger to make this script years ago, it works

you'll need to change the permission on the chmod/chown sections + Volumes section to your liking.

 

#!/bin/sh
for i in /Volumes/change/*
do
u=`echo $i | cut -d/ -f5`
case $u in
 Shared)
  ;;
 Temporary)
  ;;
 *)
sudo /usr/sbin/chown -R $u:admin $i
sudo /bin/chmod -R 750 $i
sudo /bin/chmod 550 $i
echo $u
 ;;
esac
done


exit 0

[HodgeHi]

used passenger to make this script years ago, it works

you'll need to change the permission on the chmod section + Volumes section to your liking. will also need to change the /Volumes section too obviously.

 

for i in /Volumes/change/*
do
u=`echo $i | cut -d/ -f5`
case $u in
 Shared)
  ;;
 Temporary)
  ;;
 *)
sudo /usr/sbin/chown -R $u:admin $i
sudo /bin/chmod -R 750 $i
sudo /bin/chmod 550 $i
echo $u
 ;;
esac
done


exit 0

 

Where did you get passenger from. Did you purchase it through your school?

 

I have been looking at where to purchase this app from for a while and our school does not have a credit card so i cannot purchase online.

 

I need to find a UK reseller that accepts school orders.

[gaz350]

got it on our own card and then claimed it back after getting permission from finance

[HodgeHi]

I don't own a credit card anymore since the last big bill I managed to rack up. I am also reluctant to purchase any thing on line at the moment as the fraud seems to be getting pretty rife at the moment.

 

It seems that the security on some servers at the moment and the odd inland revenue cd out and about is a concern.

[manxdan]

If the home folders are on an OD sharepoint you can just use Passenger's Batch Permissions feature. Works a treat (uses ~ for username in the filepath). Passenger is shareware, use now pay later.

 

http://www.versiontracker.com/dyn/moreinfo/macosx/11121