Applies to: All versions of Centrify DirectControl on Mac OS X 10.7 and above.
Question:
When mounting a network share on OS X 10.7 and above, the operation may fail with a notice that the user does not have permission to see its contents.
The same mount path worked with no problems in OS X 10.6:
- smb://server.domain.com/Sharepoint/Folder1/Folder2/
Where:
- Folder1 has restricted security permissions to the AD user.
- Folder2 has read access for the AD user.
Answer:
Mounting shared folders in OS X 10.7 and above now require a different permission structure than in OS X 10.6 and below:
- In OS X 10.6, the user only needs read permissions for Folder2
- In OS X 10.7 and above, the user will need read permissions through the whole tree – Sharepoint, Folder1 and Folder2.
This is a change made Apple, please see the following Apple KB for more information: