KB-2895: Mounting shared folders in OS X 10.7 and higher requires read access through the whole tree.

Tips for finding Knowledge Articles

- Enter just a few key words related to your question or problem
- Add Key words to refine your search as necessary
- Do not use punctuation
- Search is not case sensitive
- Avoid non-descriptive filler words like "how", "the", "what", etc.
- If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
- Minimum supported Internet Explorer version is IE9

No related Articles

Home >

KB-2895: Mounting shared folders in OS X 10.7 and higher requires read access through the whole tree.

Product:

Centrify Identity Service, Mac Edition ,

Published:

12 April,16 at 11:31 AM

Rating:

Applies to: All versions of Centrify DirectControl on Mac OS X 10.7 and above.

Question:

When mounting a network share on OS X 10.7 and above, the operation may fail with a notice that the user does not have permission to see its contents.

The same mount path worked with no problems in OS X 10.6:

smb://server.domain.com/Sharepoint/Folder1/Folder2/

Where:

Folder1 has restricted security permissions to the AD user.
Folder2 has read access for the AD user.

Answer:

Mounting shared folders in OS X 10.7 and above now require a different permission structure than in OS X 10.6 and below:

In OS X 10.6, the user only needs read permissions for Folder2
In OS X 10.7 and above, the user will need read permissions through the whole tree – Sharepoint, Folder1 and Folder2.

This is a change made Apple, please see the following Apple KB for more information: