#4942 permissions on server

Created from Lead: https://artichoke.syncromsp.com/leads/4536252/convert

Peet: I need help with the permissions on my server. I think we talked about it but here it is: we each have a user name and log on credentials. If I use mine or Tricia uses hers, to log on to the server, here in missoula, and create folders or data files, those folders have limited privileges (read only by mbbstaff). The folders are invisible on dropbox (because they will not upload). We can see them locally with any user. If I do the exact same thing as an mbbadmin user, no problem, any mbbstaff user can edit, add, delete alter a folder file. My work around was to have all users log on as mbbadmin. I don’t really want to do that for long. I have changed the privileges on all folders (for better or worse) which fixes the problem for all prior data files and folders, but any new or future folder/file has the same problem. i can explain more what I have done to try and correct the problem. I did not mess with server app or workgroup manager in any way, but I did look at their settings which was no help (to me). I don’t want to keep operating as an administrator and I especially don’t want all the users to operate as mbbadmin. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com

Shandor, I'm really rather concerned about your storage array. I've almost got it cleared up as far as permissions go, but I'm a lot of files are giving me an error about changing permissions. This is usually some corruption on the volume. I'll finish up with this as is, but I'd really recommend you pick up a 10TB (https://www.amazon.com/Seagate-Expansion-Desktop-External-Drive/dp/B07NPMMZ8C/ref=sr_1_2?keywords=seagate+12tb+usb&qid=1581032960&s=electronics&sr=1-2) or similar drive and get it plugged into mso. I can create a backup of your data to that drive and then us a piece of software called DiskWarrior to rebuild your existing volume and hopefully repair any damage. With that I'd also recommend at least a sing backblze backup account. It'll take a long time to get your backup up to the cloud, but it'll be worth it. https://www.backblaze.com/business-backup.html and it's as little as $55/computer per year with 30day retention and $79/computer per year with 1 year retention. Unlimited retention exists, and is affordable, but the pricing is complicated to explain. (if you pull the trigger on it, sign up through this link it will allow me to help you with configuration, monitoring etc https://secure.backblaze.com/g/qzblyzvll7rkmh7tj46t63hn37_75708) Cheers.Peet

I can get the drive. Do you want me to do so and let you know when I have it plugged into the server? And I can get the back up. As far as I can tell, I have one computer? I think I have a copy of disk warrior 5, but it stopped working on sierra or maybe high sierra. I can’t remember. It was the bomb until then. I guess I am not running newer IOS on the server so assume it will work. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Thursday, February 6, 2020 at 5:06 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

Do you have the USB stick the diskwarrior 5 came on or just a license in an email? If it's the stick, put it in the server. If it's an email forward it here [email protected]. v.5 is current, but needs to be updated. Just one computer, the server. If you're interested in backup via Backblaze, would you want forever retention, 1 year, or 30 days? yearly pricing: $60/computer with 30 day retention. $84/computer with 1 year retention. $84/computer + .005/gb/mo for versions of files updated, changed, or deleted more than one year ago. Sounds convoluted, but it shouldn't cost much, because the amount of data charged just for the changed bits if the file is still in your backup set. Again it wouldn't cost much, but if it did, you'd just drop forever retention. Yes just drop that drive onto the server and we'll get a backup going to it. Peet

I inserted the diskwarrior 5 flash drive (that they sent me) into the server. My serial number is RFAB-MBSB-PVRI My invoice that came with it says “upgrade” but I don’t think it is an upgrade. I think I got a discount for having proof of purchase for diskwarrior 4. Also, I can run it if you want. I have it on a separate computer, and I use that computer to mount the problem computer in terminal mode and run diskwarrior on it. Or you can do your thing. I will get the drive and let you know when I have it. I will do the backblaze with 1 year retention. That should be good enough. I will set it up next Friday so it can run all weekend without slowing me down. Or maybe the Friday after that which is a 3 day weekend. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Friday, February 7, 2020 at 10:23 AM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

Got DW updated and hopefully ready to go after we have a local backup. It's sitting at Starting Services. MSO may need to be restarted, but not until after we get a full backup. You needn't worry about timing starting Backblaze. We can throttle the backup to x% of your uploads or schedule it to only run outside of business hours. Just let me know when you get the account signed up and feel free to install the client on MSO. Let me know when anything's changed. You should be having no issues with your permissions today. If you are, please, let me know. Peet

Everything is working as it should. No problem with permissions. I have tried to access and save data in several ways from my various customary locations with no problems. Thanks for fixing it. I will let you know when the 10TB drive arrives and I will plug it in and turn it on when it does, but I won’t do anything else with it. I will let you know when I put backupblaze on and yes, setting up to run during down hours will be great. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Friday, February 7, 2020 at 1:03 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

I plugged the Seagate into the server but did nothing else other than power it on. The server seems to recognize it as attached via USB. I clicked on the backupblaze link you sent me. I signed up and was accepted. I received a message saying I should download and install the application. I downloaded it but did NOT install it. I was not sure if I should because diskwarrior seems to be running and doing its thing. If you log on, you will see a window with the backupblaze installer in it waiting for a double click. And I did not eject the diskwarrior stick. Maybe I never should but I have a special place for it if and when it is okay to eject it. otherwise, my new special place can be plugged into the server. Let me know what to do next. Thanks for your help. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Friday, February 7, 2020 at 1:03 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

Sorry, I was out yesterday. Your Backblaze is configured and will run *unthrottled* between the hours of 6PM and 9AM. It will basically only backup /Volumes/MBBData and /Bender Backups (your server users backup). I've set it to exclude the Dropbox folder and anything to do with Kerio for now. The selected Backup set is 2.3TB which will take it's sweet time, but less than if we were doing Dropbox and Kerio. If those hours are not the best choice, you can change it in System Preferences on MSO. Time Machine is doing a full server backup (including any Backblaze exclusions) to the external 10Tb drive (msoMachine - a play on TimeMachine). Once that is finished. I can run a full diskwarrior rebuild on /Volumes/MBBData and we should be in a much safer place all around. The Diskwarrior USB is updated, disconnected, and ready to be tucked away. As a product, it's less useful than it was in the past. It only rebuilds HFS+ directories, and does nothing with Apple's APFS ... However it does exactly what it does fantastically and HFS+ is the only viable choice for a local RAID that's made from spinning disks. Cheers.Peet

Thanks for your help. You are the man. By the way, with regard to backupblaze, my data is in two basic spots. Open cases, and closed cases. Closed cases never, or rarely change. Open cases are altered in one way: I add data to them. I almost never delete things or modify things (I save most of my work with a new name most every time I modify it). so I don’t need to go too far back with my back ups, I just need to access the data. One year is plenty. I don’t think time machine is slowing me down too much, so you can let it run. As slow as it is, it will be done by the time I come in tomorrow. I will try and remember to let backup blaze go 24/7 on Friday afternoon and change it back on Tuesday morning. It looks like I can’t have different settings for weekends than weekdays. I doubt it will have too significant an impact and if it does, I will notice and change it back. I will eject diskwarrior. I used to use it on a regular basis and I miss doing so, but maybe the Catalina is more stable than its 20 predecessors. It used to really snap my older notebooks right back into shape, but those machines, except for one, are all dead now. I will keep looking out for diskwarrior 6. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Tuesday, February 11, 2020 at 12:10 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

Sounds good. APFS is a *FUNDAMENTALLY* different file system than HFS+. As long as it's on an SSD and not a spinning hard drive it's pretty much self-healing and vastly superior to HFS+. Every 10.13 and above device that is booted from an SSD is automatically running APFS on the boot volume. Theres a lot about APFS published on the internet, but basically it will never/should never need Diswarrior optimization. Though there could be a day that diskwarrior writes a data recovery tool for APFS. Cheers.Peet

I am getting a non-stop stream of notifications on the server that says there has been a minor event on the Pegasus R2 and promise utility needs my attention. I did not do anything, I just looked at it to see if it was done with the time machine back up (it is) and that is when I saw and heard all the notifications. It looks like they have been streaming in for a while. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Tuesday, February 11, 2020 at 1:09 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

Physical Disk 6 likely needs to be replaced. This is exactly what I was imagining was on it's way. Pick up one or three of these ... The seller I see is MemoryC @ $69.31: https://www.amazon.com/gp/offer-listing/B009CPDI62/ref=olp_f_new?ie=UTF8&f_new=true

I’m sorry, I don’t understand: By either 1 or 3 disks, (1TB each); OR Buy one disk, with either 1 or 3 TB or memory? Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.Mbblawfirm.com From: peet non emergency  Reply-To: peet non emergency  Date: Wednesday, February 12, 2020 at 11:49 AM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

Sorry, these are 2TB disks. You'll need one to replace the failing drive, but It might be a good idea to have 1 or 2 extra drives available incase one of the other drives 5 drives in the array begins to fail. Cheers.Peet

Also I set your Backblaze to run continuously, but rate limited to only ever be allowed to upload at 70% of your network bandwidth. That coupled with the automatic throttle should protect the rest of your network performance. Let me know if you have any network issues that are resolved by pausing Backblaze. Peet

I got 2. One to replace the failing drive. One to have on hand for the next failing drive. Because I have a spare, I will probably never need it and the others will last forever. They should arrive next week. I will install one in place of drive 6 when it does. Just so I am clear, The Pegasus drive is what looks like the old tower configuration type unit with blue lights sitting on top of my old Xserve and it has, conincdentally, 6 bays or 6 places in which to insert a drive. I will eject the drive at the bottom or lowest point and insert a new drive. I figure drive 6 is either the top or the bottom, and I assume it is the bottom. And one last thing: Can I unplug my drobo? All the lights are red on it but the server does not appear to be using it anymore. Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.Mbblawfirm.com From: peet non emergency  Reply-To: peet non emergency  Date: Wednesday, February 12, 2020 at 12:34 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

Everything seems to be running great. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Wednesday, February 12, 2020 at 3:44 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

The spare Pegasus disks came. I ejected disk 6, and installed a new disk in its place. Red lights came on for a second or two and then changed to blue lights (like those on disk bays 1 through 5). On computer I got a window that said disk I inserted was unreadable and asked would I like to eject or initialize. I chose initialize. Disk utility appeared in forefront but I did not do anything with it, (no buttons pressed, no process run). Maybe that was the last window open before I got on computer. I did not look earlier. I also looked at the promise utility application window and it seems to think all the disks are doing what they are supposed to be doing (it gave me an alert when I ejected the disk but I figured that was okay and alerts/notifications/messages ceased after inserting new disk which also seemed as it should be). It shows that I have a disk in bays 1 through 6 and there is a green light next to “status”. I have one more new disk if I need it and I can order more when necessary. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Wednesday, February 12, 2020 at 3:44 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

I'm sorry that I wasn't clear. This is not a process that you'd want to do casually. It worked out because the array was otherwise healthy. So no damage done, but in the future, I'd wholeheartedly recommend making sure I or Promise support or someone familiar with the array plans out a replacement. I've configured the replacement drive and started the rebuild. You can see the progress under background activities in the Promise Utility. Cheers.Peet

I am glad it worked out. I was thinking it would be like the drobo’s where you just swap the new one for the broken old one. Next time I will just remind you that I have the disk and you can provide instruction. Speaking of the drobo, it is not plugged in and powered on. Let me know if I should remedy that or leave it alone. -- Shandor S. Badaruddin Moriarity & Badaruddin, PLLC 736 South 3rd Street West Missoula, Montana 59801-2514 Telephone: 406 728 6868 Facsimile: 406 728 7722 Email: [email protected] www.emsblaw.com From: peet non emergency  Reply-To: peet non emergency  Date: Tuesday, February 18, 2020 at 1:49 PM To: Shandor Badaruddin  Subject: permissions on server (message id: 22215275)

Turns out to be less of an issue than I'd thought. The Pegasus did some ... interesting ... things so what you wrote sounded scarier than it was. But it's best to just have an eye on it when it goes from a mostly healthy to degraded state. We should just let the Drobo go to the great beyond. Cheers.Peet