Best server solution for Mac Environment Mac's using 10.15.7

[SLEHartGuy]

Looking for some input on the best possible asset Server solution in a Mac working environment.
We are using iMacs, and Power Book Pro's running 10.15.7.

We have run the gamut of server solutions and have gone through as many IT people as server solutions as well. I am a graphics Mac operator in a printing company and taking things upon myself to get this done at this point. We've gone through a Mac server solution, a VM server config on a windows PC, a Drobo NAS that crashed and burned and now most recently a brand new NAS running windows. Connecting via SMB 1 as we have an older Mac running 10.7. SMB 1 is only SMB that will still play nice with a Mac that old.
The issue we cannot over come are permissions. We are having issues doing save as back to server, we are having issues modifying or deleting files, due to " You do not have permission" or " You cannot delete file because the file is in use.
To get around this we create a sub folder inside our jobs folder labeled "KILL". We can turn around come back into the folder a day or two later, and it will allow us to delete the files we were unable to edit or delete before.

Has anyone had similar experience and can lend a tip how to get around these issue?

Thanks All in Advance

 

[Flint Ironstag]

Sounds like you need to run Batchmod, reset all permissions and ACLs, then reapply permissions and test. What's your location?

 

[SLEHartGuy]

Thanks Much for the response. Appreciate the Help.
We are in Grand Rapids, MI
So run Batchmod on the server or on the Mac work stations?

 

[satcomer]

I say go with a Domain and use SMB sense Server 2010 Mac are be setup on the Domain is native now (some on Sever 2008s2 they could be detected if they were running a DNS Server too).

 

[Flint Ironstag]

Thanks Much for the response. Appreciate the Help.
We are in Grand Rapids, MI
So run Batchmod on the server or on the Mac work stations?

I would run it on the top level folder that contains all of your files. Tick the box that says apply to enclosed items. Strip all permissions and ACLs (access control lists). Then go back and apply your permissions and test. Of course, make sure you have current backups that you have verified!

Make sure you know what you're doing with Batchmod - measure twice cut once.

 

[hobowankenobi]

Having run a Mac server file-sharing since before Mac OS X (Appleshare IP if anybody recalls...), I would suggest a Synology NAS. While not perfect, it is the best I have found for cross-platform filesharing.

As for the above suggestion about batchmod...I don't think it is right in this case.

Mac permissions have been troublesome regarding file sharing since...forever. It is a long, nerdy story, but the crux of the issue is that Macs use two layers of permissions: POSIX and ACLs. POSIX is the old Unix standard, and ACLs are the old Windows standard. Two-layer permission provides flexibility but makes things confusing and not self-evident.

The real complication is that Mac ACLs are invisible.

You may run into many workarounds, and all will have pros and cons.

Batchmod, for example, can remove ACLs, but change them. And in my experience, it should be run on the machine where the files live (the server)....and if it is not a Mac it can't be run.

Another problem is permissions inheritance. If files don't inherit the right permissions automatically, one is forever chasing permission issues. Back about 10.5 Server it was so bad some admins ran automated scripts once a day to reset permissions as files were saved/modified, and did not inherit correct permissions locking out all users but the modifier. Since then it has improved, but in my experience has never been fiddle-freee.

The permissions on Synology NAS boxes have been the best (least bad) of any file server I have run for Macs, outside a full Windows server, SMB only box...but they have their own quirks with Macs not to mention very high retail license costs.

It sounds like you need help from somebody familiar with Mac file sharing. I hope you find the right tech.

 

[hobowankenobi]

I would run it on the top level folder that contains all of your files. Tick the box that says apply to enclosed items. Strip all permissions and ACLs (access control lists). Then go back and apply your permissions and test. Of course, make sure you have current backups that you have verified!

Make sure you know what you're doing with Batchmod - measure twice cut once.

while this may work in the short run...what happens when new files are uploaded, or existing files are modified? In by-gone years this same process would have to done repeatedly, even daily, depending on the workload and churn of file creation. Are you sure this is not the case now?

 

[Flint Ironstag]

while this may work in the short run...what happens when new files are uploaded, or existing files are modified? In by-gone years this same process would have to done repeatedly, even daily, depending on the workload and churn of file creation. Are you sure this is not the case now?

Not saying it can't happen, but never encountered this in my time. Certainly not having to run scripts to repair permissions as a scheduled task - sounds like bad planning during setup and no/shoddy maintenance.

Yeah, OP sounds like you would be best served by an experienced local sysadmin. And the Synology units have begun replacing Mac mini servers for me, and so far, so good.

 

[hobowankenobi]

Not saying it can't happen, but never encountered this in my time. Certainly not having to run scripts to repair permissions as a scheduled task - sounds like bad planning during setup and no/shoddy maintenance.

Maybe it was me. But in that environment, lots of files got uploaded by lots of users, and inheritance seemed inconsistent. Always an ACL issue that even savvy users could not resolve. This was back on 10.10, 10.11. After switching out to Synology, no more issues...always had to leave ACLs in place as it was a mixed platform group.

Regardless, it was common as per user gripes and threads about it were common. Sounds like OP may have similar hurdles.

-----

OP: do you have a directory server? Or do users have accounts on the server separate from their local accounts?

 

[hobowankenobi]

Also OP...not surprised Drobo failed. Not really up to a group file server.

If you want to look at a Synology, be aware that the low-end models are slow, due to lack of CPU and RAM...and why they are so inexpensive. Depending on the number of users and volume of traffic, and storage space, you would likely want to look at a minimum of a 2 bay unit with adequate resources, like one of these.

Just add drives, depending on how much storage you need.

Synology has a ton of features that are compelling. Yell if you have questions.

 

[SLEHartGuy]

Also OP...not surprised Drobo failed. Not really up to a group file server.

If you want to look at a Synology, be aware that the low-end models are slow, due to lack of CPU and RAM...and why they are so inexpensive. Depending on the number of users and volume of traffic, and storage space, you would likely want to look at a minimum of a 2 bay unit with adequate resources, like one of these.

Just add drives, depending on how much storage you need.

Synology has a ton of features that are compelling. Yell if you have questions.

Thanks Much For the response. As far as hardware goes our IT guy has a beefed up system. It's just powered by Windows though.