Mavericks, SMB2 and network share corruption

[franton]

As posted by @bmwarren in my other thread about restricting 10.9's SMB to SMB1, there's been posts about Mavericks corrupting SMB share permissions.

Has anyone else encountered this in their testing? I am extremely loathe to deploy this OS until i'm happy this is either a one off or been fixed.

[dexterrivera]

What exactly are you seeing so I can keep an eye out for it. I remember we had a major outage when Apple introduced its own SMB with 10.7. We use EMC storage.

[franton]

I'm not seeing anything: i've prematurely stopped all testing while I deal with some other things. Also what i've been seeing on the macenterprise group is giving me major cause for concern.

See https://groups.google.com/d/msg/macenterprise/B0R5-WTGIrM/yNf-XQAqFqYJ

[mm2270]

We haven't had the chance to test any of this out with Mavericks, but now that some have seen the issue, we will surely be looking very close at that and doing some pointed testing in our environment.
I have the icky feeling this is going to be one of those things that depends partly on your environment, such as server OSes, share types, protocols and possibly even how your Active Directory environment works, which should make it fun to track down and troubleshoot.
But perhaps I'm wrong and its a straightforward thing that everyone, most importantly Apple, can reproduce, and thus fix.

[mibrodt]

We just started using Mavericks here to an SMB share on an Isilon NAS. So far, without any modifications and using SMB2, we have not experienced any issues, and performance has been solid.

I also have an Mac Mini Server setup with Mavericks as our distribution point, only using SMB and HTTP and we have not had any issues there either.

[haircut]

SMB2 in Mavericks is great feature-wise. In our environment on pre-10.9 systems our users were unable to save to a Windows share directly from most applications because they utilized "safe save" (where the document was written to a temp file, moved, renamed, etc in one transparent operation). Users had to save to a local disk then copy/move to the share.

The bug, however, is pretty bad. A user can Get Info on a remote file to view permissions and all Windows permissions are shown as "Custom." If the user clicks the "custom" text and attempts to change the permissions or even just clicks back off with no modifications it kills all the permissions on the server. Removes 'everyone' permissions and 'creator owner' such that no one could access the file, even Domain Administrators. Attempting the view on the server side reports the ACLs are incorrectly ordered and gives an access denied error.

[zmbarker]

Can someone confirm that this smb2 permissions bug is only a problem when the mac computer is bound to AD?

[franton]

Seems only to be on SAN's and vendor specific ones at that. I've not managed to replicate this on our systems. However I have found in certain circumstances, SMB2 can be a lot slower than SMB1. Weird.

[franton]

I wrote this based on some other guy's work. The original only worked on a specific user account, my script disables SMB2 across the entire computer.

https://github.com/franton/Disable-SMB2

[Ben_sn]

We have these issues. I have documented some stuff here http://macsmbissues.com
You guys got any comments/questions/suggestions please don't hesitate.

[corbinmharris]

We are seeing the same issue in our Finance dept. We thought that 10.9.2 update would resolve the issue, but it popped up again last week. I have been asked to migrate users back to 10.8.5 (not fun) and we ordered a couple of PC laptops as well to start testing (even less fun).

My boss won't even consider it might be time to replace our ancient EMC.

[corbinmharris]

We are seeing the same issue in our Finance dept. We thought that 10.9.2 update would resolve the issue, but it popped up again last week. I have been asked to migrate users back to 10.8.5 (not fun) and we ordered a couple of PC laptops as well to start testing (even less fun).

My boss won't even consider it might be time to replace our ancient EMC.

[corbinmharris]

Has anyone had to migrate users back to OS X 10.8.5? Any tips on the process?

[corbinmharris]

Doing a TimeMachine backup to an external drive and then a wipe/install of 10.8.5, followed by a restore from TM seems to work fine. I run Cocktail for Mountain Lion to clear caches and repair permissions. The finance folks won't miss the latest version of Apple iWorks and it's better then setting up new Dell laptops.